Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
13/03/2024, 13:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c5ef8b2d53d157c5a6bf17113132ad4e.dll
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
c5ef8b2d53d157c5a6bf17113132ad4e.dll
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
c5ef8b2d53d157c5a6bf17113132ad4e.dll
-
Size
34KB
-
MD5
c5ef8b2d53d157c5a6bf17113132ad4e
-
SHA1
69704052d1f5acd02fcf9de50a305c03baa9eda0
-
SHA256
532bfdb0062749376502736766e36fa522ecb665eda4e5848beff57bb07c8783
-
SHA512
e63dd2080b1ad822a40f9e43f88aae29c382ff8d29e96bdf6eca174a6775a962fc3ea760b28479d9703b37599d317aed17ece71060a3c73b6617650641dc6b56
-
SSDEEP
768:ubOhTLYMpXQ3T3YNrZr//7WvkZCOqhnPmRZ7p0jQF:2OhTPN/Nr17WvHpORZ7p0jC
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 744 wrote to memory of 2308 744 rundll32.exe 87 PID 744 wrote to memory of 2308 744 rundll32.exe 87 PID 744 wrote to memory of 2308 744 rundll32.exe 87
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c5ef8b2d53d157c5a6bf17113132ad4e.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:744 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c5ef8b2d53d157c5a6bf17113132ad4e.dll,#12⤵PID:2308
-