Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
29/01/2024, 15:35
Static task
static1
Behavioral task
behavioral1
Sample
03d647f66065d03b4b03c5965688c08853eb1542bca1d371d5a1e59f2183f3b7.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03d647f66065d03b4b03c5965688c08853eb1542bca1d371d5a1e59f2183f3b7.dll
Resource
win10v2004-20231215-en
General
-
Target
03d647f66065d03b4b03c5965688c08853eb1542bca1d371d5a1e59f2183f3b7.dll
-
Size
1.4MB
-
MD5
9314d1bf968eb3529fc0048e9bd8cc6e
-
SHA1
33ed0954e05dd952f2b5ea4e0f3d54490cadcff8
-
SHA256
03d647f66065d03b4b03c5965688c08853eb1542bca1d371d5a1e59f2183f3b7
-
SHA512
12a6e12aca43fd731524f94fe0459c97f942befafc47299ba4acbafa1c46e1e92dc788a59df20b4f1924325fb74916bf2d6f95dc3d5fdf72c7626821231972c6
-
SSDEEP
24576:iDEhL47pTOAVjfhzsXBn6NjVpWBcXEDYVU85sqHLtFAWruNoWdj:NSiXBnAVpWBmFAWqNx
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1692 1388 WerFault.exe 84 -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1232 wrote to memory of 1388 1232 rundll32.exe 84 PID 1232 wrote to memory of 1388 1232 rundll32.exe 84 PID 1232 wrote to memory of 1388 1232 rundll32.exe 84
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\03d647f66065d03b4b03c5965688c08853eb1542bca1d371d5a1e59f2183f3b7.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1232 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\03d647f66065d03b4b03c5965688c08853eb1542bca1d371d5a1e59f2183f3b7.dll,#12⤵PID:1388
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1388 -s 6443⤵
- Program crash
PID:1692
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 1388 -ip 13881⤵PID:3260