Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
05/04/2024, 01:08
Static task
static1
Behavioral task
behavioral1
Sample
cfa30c83ff7ccd566e91a75d2827ab4ba8198a0b3d4ac8861fa5fae9ec62bf0d.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cfa30c83ff7ccd566e91a75d2827ab4ba8198a0b3d4ac8861fa5fae9ec62bf0d.dll
Resource
win10v2004-20240226-en
General
-
Target
cfa30c83ff7ccd566e91a75d2827ab4ba8198a0b3d4ac8861fa5fae9ec62bf0d.dll
-
Size
7KB
-
MD5
53ffd28a3a3d9766e66a0b2d4ea7c5e1
-
SHA1
3b23fe2a4099a5d67ecd12329b890745bed86d3a
-
SHA256
cfa30c83ff7ccd566e91a75d2827ab4ba8198a0b3d4ac8861fa5fae9ec62bf0d
-
SHA512
edf0b7dba596cf68e7103fb1cad062f8b1a3a7026c18f745e434cc69b71256addf7006fd1d4e95ed389822f1cc0529cd1417680b2cb96aa3a7b5372435900cb7
-
SSDEEP
48:66ay5YVO3EVkApc2wp8hH1NZn5EquglQ067YbPWwbABbgL3q9J5S2hmc:b3EVkApcX4Hiv0hbPGq3qX5S2hV
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2356 wrote to memory of 1720 2356 rundll32.exe 93 PID 2356 wrote to memory of 1720 2356 rundll32.exe 93 PID 2356 wrote to memory of 1720 2356 rundll32.exe 93
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\cfa30c83ff7ccd566e91a75d2827ab4ba8198a0b3d4ac8861fa5fae9ec62bf0d.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2356 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\cfa30c83ff7ccd566e91a75d2827ab4ba8198a0b3d4ac8861fa5fae9ec62bf0d.dll,#12⤵PID:1720
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4168 --field-trial-handle=2284,i,15722001240173834669,15048020084704567542,262144 --variations-seed-version /prefetch:81⤵PID:3104