Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
3Acx01000.sys
windows10-2004-x64
1AudioCapture.dll
windows7-x64
1AudioCapture.dll
windows10-2004-x64
1HTCTL32.dll
windows7-x64
3HTCTL32.dll
windows10-2004-x64
3PCICHEK.dll
windows7-x64
1PCICHEK.dll
windows10-2004-x64
1PCICL32.dll
windows7-x64
1PCICL32.dll
windows10-2004-x64
1TCCTL32.dll
windows7-x64
1TCCTL32.dll
windows10-2004-x64
1client32.exe
windows7-x64
10client32.exe
windows10-2004-x64
10msvcr100.dll
windows7-x64
3msvcr100.dll
windows10-2004-x64
3pcicapi.dll
windows7-x64
1pcicapi.dll
windows10-2004-x64
1remcmdstub.exe
windows7-x64
1remcmdstub.exe
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
19/03/2024, 23:47
Static task
static1
Behavioral task
behavioral1
Sample
Acx01000.sys
Resource
win10v2004-20231215-en
Behavioral task
behavioral2
Sample
AudioCapture.dll
Resource
win7-20240215-en
Behavioral task
behavioral3
Sample
AudioCapture.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral4
Sample
HTCTL32.dll
Resource
win7-20240221-en
Behavioral task
behavioral5
Sample
HTCTL32.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral6
Sample
PCICHEK.dll
Resource
win7-20240215-en
Behavioral task
behavioral7
Sample
PCICHEK.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral8
Sample
PCICL32.dll
Resource
win7-20231129-en
Behavioral task
behavioral9
Sample
PCICL32.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral10
Sample
TCCTL32.dll
Resource
win7-20240221-en
Behavioral task
behavioral11
Sample
TCCTL32.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral12
Sample
client32.exe
Resource
win7-20240221-en
Behavioral task
behavioral13
Sample
client32.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral14
Sample
msvcr100.dll
Resource
win7-20240221-en
Behavioral task
behavioral15
Sample
msvcr100.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral16
Sample
pcicapi.dll
Resource
win7-20240319-en
Behavioral task
behavioral17
Sample
pcicapi.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral18
Sample
remcmdstub.exe
Resource
win7-20240221-en
Behavioral task
behavioral19
Sample
remcmdstub.exe
Resource
win10v2004-20240226-en
General
-
Target
PCICL32.dll
-
Size
3.3MB
-
MD5
916c03d8fc0c1fd211c254737dff1055
-
SHA1
948ee4fbae7ce9dc7a37ccaca75341876bbf5d70
-
SHA256
250e8bbec081ae5e65b669da92652af6d4266db816c8705fbc9be84707914d99
-
SHA512
ad18049763a0c289f80c0efa21fbe2a44d0d3f4b5f3686ed9be7562e5c9c68f932a8047377e3a5a8a2a6f09046bb12eadf8b6d3b99dfaa81650fa633ccee1050
-
SSDEEP
49152:IPcnfKOu6iigooamJwfLlH41GarwYoxeOfR90J0TpHaJclST2503:IPcniOu6CvJwfLVzpxeO59/Sv
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2880 wrote to memory of 2900 2880 rundll32.exe 28 PID 2880 wrote to memory of 2900 2880 rundll32.exe 28 PID 2880 wrote to memory of 2900 2880 rundll32.exe 28 PID 2880 wrote to memory of 2900 2880 rundll32.exe 28 PID 2880 wrote to memory of 2900 2880 rundll32.exe 28 PID 2880 wrote to memory of 2900 2880 rundll32.exe 28 PID 2880 wrote to memory of 2900 2880 rundll32.exe 28