Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
03/02/2024, 02:25
Behavioral task
behavioral1
Sample
Play.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Play.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
shivislesv120416+10tr.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
shivislesv120416+10tr.exe
Resource
win10v2004-20231222-en
General
-
Target
Play.dll
-
Size
35KB
-
MD5
55761ae5528ca8a0a377a68112bb1154
-
SHA1
dcffb53ce66ba6ee478e7d71aa1f0e9df12a9901
-
SHA256
c880e5075dbb5c7ddbe069f2df38a26073acaee2ad77dd74eb4f98d6ebfc21d5
-
SHA512
c60adccd6e0a250ef82a6018c7193516c9818b848d7c6ca225a2540cb274561eb8940cef8571005bfcc9868241c9768ac1465ea6283450c63b0a444b3f582d76
-
SSDEEP
768:UT59z8PmIsX9mZKyQb62I5xzIGeDpzoTm/ct8tfq+G8D2:Uz8P1sUZKyj5xsGeDpzoCuafq+GL
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2236 wrote to memory of 1048 2236 rundll32.exe 28 PID 2236 wrote to memory of 1048 2236 rundll32.exe 28 PID 2236 wrote to memory of 1048 2236 rundll32.exe 28 PID 2236 wrote to memory of 1048 2236 rundll32.exe 28 PID 2236 wrote to memory of 1048 2236 rundll32.exe 28 PID 2236 wrote to memory of 1048 2236 rundll32.exe 28 PID 2236 wrote to memory of 1048 2236 rundll32.exe 28