Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    90s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/01/2024, 04:07

General

  • Target

    3Dfx/Glide3x.dll

  • Size

    99KB

  • MD5

    0122a1ac0b8e2a50ffdd5bcb4da7a240

  • SHA1

    127ff5c40f194c05cc6a4f023850951ac1d88cfa

  • SHA256

    ed951ce24bad7b9da4d2a6383c7e3043ac55c44bb37fd6e5d34a0d78ff0d0047

  • SHA512

    150da2620d21bec97a2ba882704a2fc0f56d705334d126088eb17a174bce5a25afcbfd1f838af7299a5b76977f3f438d8d57f72c15be26654d4001e4961206c5

  • SSDEEP

    3072:gaEBqxa3lq41VMq7HpdZZXEqFQN6C7LgkTKLYSgV4AvRYz:grV13Mq7HdZXa7Lgk2UxZvy

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\3Dfx\Glide3x.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4004
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\3Dfx\Glide3x.dll,#1
      2⤵
        PID:3004

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3004-0-0x0000000010000000-0x0000000010062000-memory.dmp

      Filesize

      392KB