Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 23:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ea1303af824636b9fd37c09a98fa86bc.dll
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ea1303af824636b9fd37c09a98fa86bc.dll
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
ea1303af824636b9fd37c09a98fa86bc.dll
-
Size
7KB
-
MD5
ea1303af824636b9fd37c09a98fa86bc
-
SHA1
cfc712001860dda710b45ad42003222206420177
-
SHA256
47b56dc397b820d13bd4cff9b2104a1ce7e7aaec932024de27b8356064700a66
-
SHA512
e375abb3d3b5e77aeab1fbf57ccd549ae6a0e156384a84468fe9593295aff18fc37f79c1775f961f2f279721ef3dd4cd66508303d7870b7f3f183595443d86d3
-
SSDEEP
96:wb4VHccYJUC/aFbz/j0OvaPdd3cX5aXW:wUaJf/aFbP0Oy2JaX
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2188 wrote to memory of 1500 2188 rundll32.exe 28 PID 2188 wrote to memory of 1500 2188 rundll32.exe 28 PID 2188 wrote to memory of 1500 2188 rundll32.exe 28 PID 2188 wrote to memory of 1500 2188 rundll32.exe 28 PID 2188 wrote to memory of 1500 2188 rundll32.exe 28 PID 2188 wrote to memory of 1500 2188 rundll32.exe 28 PID 2188 wrote to memory of 1500 2188 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ea1303af824636b9fd37c09a98fa86bc.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2188 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ea1303af824636b9fd37c09a98fa86bc.dll,#12⤵PID:1500
-