Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

immunity_patch.dll

windows7-x64

1

immunity_patch.dll

windows10-2004-x64

1

Resubmissions

24/02/2024, 13:27

240224-qqdkmsdf6w 3

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 13:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    immunity_patch.dll

  • Size

    1001KB

  • MD5

    ab9c8096adc570783063ca78f6a8130d

  • SHA1

    dde1c227877c07e82553f93cadfda51b9772375c

  • SHA256

    3cccdfae7c0f5e9c561c8e7e95cf73630a2d98362501b18c6aaaa9d4fdf96956

  • SHA512

    34e1360a28a7658a983bd38cf2fbce6e19c56aa14569dbd9090f7f6fa037ed332b3f9d71982a4c735f2e5e589a7df6d517db7c04a5d4788fce8abc3e8fdcdd3b

  • SSDEEP

    24576:WwwjVzeBbXh2T/YMUs/Jle1sKT0mUDwU57lAfhGS8cUnKwP7Pkt:W1jVz8bXkE7s/JUoH7afTWnXQ

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\immunity_patch.dll,#1
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads