Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/04/2024, 23:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c1584873e560b2fa34f4069c80c68cce.dll
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
c1584873e560b2fa34f4069c80c68cce.dll
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
c1584873e560b2fa34f4069c80c68cce.dll
-
Size
81KB
-
MD5
c1584873e560b2fa34f4069c80c68cce
-
SHA1
0cb6ddbd924aabec97d1f6e1a555b232de68e952
-
SHA256
46350426116cf0ce60e5cd9ccf4744d750844f0fc1305ff07ce5c2af2a4e9d0b
-
SHA512
42edf52c4d1fe21980e408bb55ed4b6c204910d17d3738407d586c4e3334210bc8ea0c9a97e66d86a7b10862c90a37b5aa9c31323d986907abbaf779fe9d2816
-
SSDEEP
1536:Zc+UPvS0RKCmqAvj45Hx8u05iecuYSoosWaocdBkez0U+GJ:O+5oxmqAiR8+/RBkez0U+e
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4804 wrote to memory of 216 4804 rundll32.exe 85 PID 4804 wrote to memory of 216 4804 rundll32.exe 85 PID 4804 wrote to memory of 216 4804 rundll32.exe 85
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c1584873e560b2fa34f4069c80c68cce.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4804 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c1584873e560b2fa34f4069c80c68cce.dll,#12⤵PID:216
-