Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1405s -
max time network
1174s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
09/03/2024, 09:34
General
-
Target
media_dll/SDL.dll
-
Size
303KB
-
MD5
a0ca62c323eefea70e2ebe7abb61a233
-
SHA1
db17f036c6ff8ff2fb7b73a9f5c15cfce4aaf0b3
-
SHA256
392d3ad31c71e91e86e31747d695737e21f81d5e26c2e6d6782ac21f906c70c1
-
SHA512
e9d217b7248161c935833aae7c5fbd12256fe0835e891b829d11b111f5f72b4b81783a467e01cfcf2ca8ccf191cb4d41ce8233e96b785cbfb71896b6c5f70641
-
SSDEEP
6144:zwGtZXn6NpaY+JOtOUm9ARogXSy5ZBYQcj8eKmzAlSQq:rzXn6paY+JOtOzGNiy5854Lq
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\media_dll\SDL.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\media_dll\SDL.dll,#12⤵
-
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB