Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

3

1c35a73606...02.dll

windows7-x64

5

1c35a73606...02.dll

windows10-2004-x64

5

Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/01/2024, 14:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1c35a73606fa66920f8f7e07f84c446a8b99b2431c465634e28f10ae03765702.dll

  • Size

    1.1MB

  • MD5

    9a603882ba86acbab41e07e0e4d2845c

  • SHA1

    20a44bd11396544db2cbe401e985e8c5069f76b7

  • SHA256

    1c35a73606fa66920f8f7e07f84c446a8b99b2431c465634e28f10ae03765702

  • SHA512

    3c4ac525b7ac2ff1f88ecf26be5026fd6f32a606a29f01962d6ab4953ab07fca999d2a3e047706809d9b1b69461bcc601894dc4d53ebb4fe3834da57fbdb986e

  • SSDEEP

    24576:cIult86Hku5o5SaMQ9WLg3NWDZIvXQa8u1MaQae9f:7PoqYalh0SPEuRQamf

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1c35a73606fa66920f8f7e07f84c446a8b99b2431c465634e28f10ae03765702.dll,#1
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:1248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1248-0-0x000007FEF6460000-0x000007FEF684D000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/1248-2-0x000007FEF6070000-0x000007FEF645D000-memory.dmp

    Filesize

    3.9MB

    Download