Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

dll_one_two.dll

windows7-x64

1

dll_one_two.dll

windows10-2004-x64

1

launcher.bat

windows7-x64

1

launcher.bat

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 15:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dll_one_two.dll

  • Size

    922KB

  • MD5

    af7364f14a56ae4234d449ff89a2bb7d

  • SHA1

    ce261d1f31bed80417009fbeb5230be37c34e374

  • SHA256

    a59707803f3d94ed9cb429929c832e9b74ce56071a1c2086949b389539788d8a

  • SHA512

    4c6982a5a11578cdd1b2789628787a8a7f08c86e814dfbe717a1e9cb43060b3f9b888948bdc97bcf207d5dd06398a955cab46f2cfc28761b3be15ef40fbc14de

  • SSDEEP

    12288:2/cSVrVsunK0AtRTxsdzvbFbkag0UvMzK4NWJFgVgU5Sz9duW/Tw6vhWDsghGdQ+:QcS1VTinFBdQx3VcNNWyn2DmYH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\dll_one_two.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2872-1-0x0000000000120000-0x000000000014D000-memory.dmp

    Filesize

    180KB

    Download

  • memory/2872-3-0x00000000004F0000-0x0000000000520000-memory.dmp

    Filesize

    192KB

    Download

  • memory/2872-0-0x0000000000520000-0x0000000000550000-memory.dmp

    Filesize

    192KB

    Download