Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

18/01/2024, 10:46

240118-mt9wgaadd2 7

18/01/2024, 09:27

240118-le4v8shch2 7

18/01/2024, 09:17

240118-k9c6bshbh2 6

Analysis

  • max time kernel
    148s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/01/2024, 09:27

General

  • Target

    $_131_/lang-1031.dll

  • Size

    285KB

  • MD5

    9c0270dbad21279f2ac5b4f686a841a0

  • SHA1

    2815192bf6339f2c61f4cf66b9b75a5f341e4fb7

  • SHA256

    49496d4bbd3db3e7446749cb7d986cd0c99405c50c5a88bf55606cc87d25cfde

  • SHA512

    25c69520f9175e29821608ecdb60159bf2a8124b98fe59edef39dbfecad2e1602e0f4e0cb55d8a70cede9169ed09f5ec0e946a48dbc8cbcb12266f24b39be2b2

  • SSDEEP

    3072:MCJRKPgjvypvWTChegDQhK7JUfRtR+ga9hI7AlfbamVXu9dIEhpg8XVLZkwwlPaO:3ypvCEFzda9Yhou

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\$_131_\lang-1031.dll,#1
    1⤵
      PID:5092
    • C:\Windows\system32\rundll32.exe
      "C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
      1⤵
        PID:1432
      • C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe -k UnistackSvcGroup
        1⤵
          PID:1404

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1404-0-0x000001D3E4950000-0x000001D3E4960000-memory.dmp

          Filesize

          64KB

        • memory/1404-16-0x000001D3E4A50000-0x000001D3E4A60000-memory.dmp

          Filesize

          64KB

        • memory/1404-36-0x000001D3ECF00000-0x000001D3ECF01000-memory.dmp

          Filesize

          4KB

        • memory/1404-35-0x000001D3ECDF0000-0x000001D3ECDF1000-memory.dmp

          Filesize

          4KB

        • memory/1404-34-0x000001D3ECDF0000-0x000001D3ECDF1000-memory.dmp

          Filesize

          4KB

        • memory/1404-32-0x000001D3ECDC0000-0x000001D3ECDC1000-memory.dmp

          Filesize

          4KB