Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
18/01/2024, 09:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6503d36e525410c6b2cef2f3e6fd441a.dll
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
6503d36e525410c6b2cef2f3e6fd441a.dll
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
6503d36e525410c6b2cef2f3e6fd441a.dll
-
Size
183KB
-
MD5
6503d36e525410c6b2cef2f3e6fd441a
-
SHA1
8029919d0e9462ba11090d4c736901aa0abed878
-
SHA256
78d8a11f5bd3692797c78d2f4b1b3709bc86936c9812923e97a66bded7371e55
-
SHA512
8f899e9319e2f33d70c8a2b58c10116ca939fed0c6ff2ca8771b52dcf59845fbca9926d81681f0ae0261ebe6977b73ac8ea5f790922db7815cc1b72f45a40ba8
-
SSDEEP
3072:iUQwOxYZddDsIYk6I4pwX4gfNlOQx+et+jon6I:iUvO+ZdZCk6IrNOQUer6I
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1708 wrote to memory of 2312 1708 rundll32.exe 28 PID 1708 wrote to memory of 2312 1708 rundll32.exe 28 PID 1708 wrote to memory of 2312 1708 rundll32.exe 28 PID 1708 wrote to memory of 2312 1708 rundll32.exe 28 PID 1708 wrote to memory of 2312 1708 rundll32.exe 28 PID 1708 wrote to memory of 2312 1708 rundll32.exe 28 PID 1708 wrote to memory of 2312 1708 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\6503d36e525410c6b2cef2f3e6fd441a.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1708 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\6503d36e525410c6b2cef2f3e6fd441a.dll,#12⤵PID:2312
-