Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
09/04/2024, 21:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
03baa16eced56176de5043951865ac28.dll
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
03baa16eced56176de5043951865ac28.dll
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
03baa16eced56176de5043951865ac28.dll
-
Size
6KB
-
MD5
03baa16eced56176de5043951865ac28
-
SHA1
1e5e54579f81d93d6dea1f308d7c4182ef56a987
-
SHA256
f20cdeed4da6c999f02539481b851abc3ac0e86c2f972998685ab810133548f8
-
SHA512
514b8ad6acc8156dc89ded48bab3fe89975fbbde3824b4ccad5228ef8c74988bc13bb9145bcf29cbd5db76e91e60c4c0684bb1db2c5c0a494a48db513436f0ec
-
SSDEEP
48:63mll5YVOa9VUX1iwbQWu0uB+BDq9J5SH:VDa9VUX9bQWOB+FqX5SH
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1384 wrote to memory of 624 1384 rundll32.exe 85 PID 1384 wrote to memory of 624 1384 rundll32.exe 85 PID 1384 wrote to memory of 624 1384 rundll32.exe 85
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\03baa16eced56176de5043951865ac28.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1384 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\03baa16eced56176de5043951865ac28.dll,#12⤵PID:624
-