Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 22:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
84aa84891a741adde178c382a3fa7530.dll
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
84aa84891a741adde178c382a3fa7530.dll
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
84aa84891a741adde178c382a3fa7530.dll
-
Size
6KB
-
MD5
84aa84891a741adde178c382a3fa7530
-
SHA1
328aa8ecfe75ce5bc9a4e30a29312f0f16dbb8c2
-
SHA256
9b408c7be824bc8c5dbcb108cdb4b0a4f5cad029d04b39fae0e665ec465cc24e
-
SHA512
9fac0dccfcd9a32a17f1dbdbb45fc59a9bee935035244f6e98c796859a8056e54cbd67f86b20576f0aca9a48deb85523e6ef4d5bcd733cd8c9310aea663de7af
-
SSDEEP
48:6DOdd5YVOiFVE/y/sqwokyJyi0NB+BDq9J5S9:piFVE/y6okJZB+FqX5S9
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2236 wrote to memory of 2264 2236 rundll32.exe 28 PID 2236 wrote to memory of 2264 2236 rundll32.exe 28 PID 2236 wrote to memory of 2264 2236 rundll32.exe 28 PID 2236 wrote to memory of 2264 2236 rundll32.exe 28 PID 2236 wrote to memory of 2264 2236 rundll32.exe 28 PID 2236 wrote to memory of 2264 2236 rundll32.exe 28 PID 2236 wrote to memory of 2264 2236 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\84aa84891a741adde178c382a3fa7530.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2236 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\84aa84891a741adde178c382a3fa7530.dll,#12⤵PID:2264
-