Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/02/2024, 20:49
Behavioral task
behavioral1
Sample
acd33c7aaca074b61d883539a220d82d.dll
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
acd33c7aaca074b61d883539a220d82d.dll
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
acd33c7aaca074b61d883539a220d82d.dll
-
Size
135KB
-
MD5
acd33c7aaca074b61d883539a220d82d
-
SHA1
6a1a2f5554c1b440ab93ab1088f11fc2f0b82edf
-
SHA256
d79a5936dad75bd6505bf204b8274480f9dcb5356feaad393de1994f915fdb5b
-
SHA512
90ad9c0164696d10425ffb4d040adc86933600958b4b3219d13501ae92a3c2a38796284b5a30d0bcd24799bf60fbf57473e7c911e5502125a634d989f91bf03a
-
SSDEEP
3072:DnRLqZnAJLLT08TeuNju9y1sOrdMv2mADC7nCpqu:1e1Al08ioyyaCdMv2mAu7nCp/
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1044 wrote to memory of 2364 1044 rundll32.exe 28 PID 1044 wrote to memory of 2364 1044 rundll32.exe 28 PID 1044 wrote to memory of 2364 1044 rundll32.exe 28 PID 1044 wrote to memory of 2364 1044 rundll32.exe 28 PID 1044 wrote to memory of 2364 1044 rundll32.exe 28 PID 1044 wrote to memory of 2364 1044 rundll32.exe 28 PID 1044 wrote to memory of 2364 1044 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\acd33c7aaca074b61d883539a220d82d.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1044 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\acd33c7aaca074b61d883539a220d82d.dll,#12⤵PID:2364
-