Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

oringo.dll

windows7-x64

8

oringo.dll

windows10-2004-x64

8

Analysis

  • max time kernel
    13s
  • max time network
    20s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/03/2024, 17:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    oringo.dll

  • Size

    2.0MB

  • MD5

    473355fa4b769f1a1d5e1581dbfbd702

  • SHA1

    f2da0b6ae86a1c72224e1df8b1c3b8106fc8f25c

  • SHA256

    c1bea49c84c424abeb53becd24c55e1f2637d250780808889a5a5a2b34e49015

  • SHA512

    99d82caa4afe96010ad9d44f172b24e61cd06a57ce7a86992154937401f4b5f89c073eed4e358bf6a3c7dad0dfbe7c12c430c71f41baad36d63ca9a78f25ac56

  • SSDEEP

    49152:o7vX2xRW4f1I167Mbr3LgRqSiFq+Iq3sG:o705E8ISiFqEsG

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\oringo.dll,#1
    1⤵
    • Blocklisted process makes network request
    PID:1084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads