Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/03/2024, 03:00

General

  • Target

    636d417c4967e5b935245b89dd64b10656fe8214b3c3cdc149da0705fc466c65.dll

  • Size

    980KB

  • MD5

    012aefdfa90542259103e5108ff4bba9

  • SHA1

    6f2652f1a6a94d7eee20e0bb037cbd51779dafe7

  • SHA256

    636d417c4967e5b935245b89dd64b10656fe8214b3c3cdc149da0705fc466c65

  • SHA512

    ab110473410a30dbeb676f79e5653094cbf8f2d6f44414fa5020953c907e31edd7d95b2453f2b4a062023d8ef137cc639ede2bcfe7f84794d83ef975cdbb6b8c

  • SSDEEP

    24576:nZQcaNvHu27o1i4v6sjaUwdr4M5gx6uxVNMtRqM60dXzDg:nycQvOg/XA

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 5 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\636d417c4967e5b935245b89dd64b10656fe8214b3c3cdc149da0705fc466c65.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2208
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\636d417c4967e5b935245b89dd64b10656fe8214b3c3cdc149da0705fc466c65.dll,#1
      2⤵
      • Blocklisted process makes network request
      PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads