Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
108s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/04/2024, 23:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ea1303af824636b9fd37c09a98fa86bc.dll
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ea1303af824636b9fd37c09a98fa86bc.dll
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
ea1303af824636b9fd37c09a98fa86bc.dll
-
Size
7KB
-
MD5
ea1303af824636b9fd37c09a98fa86bc
-
SHA1
cfc712001860dda710b45ad42003222206420177
-
SHA256
47b56dc397b820d13bd4cff9b2104a1ce7e7aaec932024de27b8356064700a66
-
SHA512
e375abb3d3b5e77aeab1fbf57ccd549ae6a0e156384a84468fe9593295aff18fc37f79c1775f961f2f279721ef3dd4cd66508303d7870b7f3f183595443d86d3
-
SSDEEP
96:wb4VHccYJUC/aFbz/j0OvaPdd3cX5aXW:wUaJf/aFbP0Oy2JaX
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2504 wrote to memory of 1316 2504 rundll32.exe 86 PID 2504 wrote to memory of 1316 2504 rundll32.exe 86 PID 2504 wrote to memory of 1316 2504 rundll32.exe 86
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ea1303af824636b9fd37c09a98fa86bc.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2504 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ea1303af824636b9fd37c09a98fa86bc.dll,#12⤵PID:1316
-