Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    93s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/05/2024, 09:40

General

  • Target

    编程助手2.5/UPX.dll

  • Size

    283KB

  • MD5

    7f507c28d0782dcbe7e3e770f68c4e00

  • SHA1

    5c1a3bdb774fd84829a113014396a8bc53ac3ab4

  • SHA256

    1ffa43d2aa79ccc3c1f06d6367e5453906796a810107e169dda2e54cc7a8818d

  • SHA512

    4c1ab75532c4ecaa32f45cd6831d6a5979b0ad3796d784a64ffeb42af3816809478091c2c8cc0ec166a1559caad67e23817d6c530ad4fb581b08975d4a4f1da1

  • SSDEEP

    6144:9ZF6unwNh9ooHxWUE0VgzO9NYn86eaMfeICQf7HhoS:bFBwhN3VEkNw5MG5KVoS

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\编程助手2.5\UPX.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2196
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\编程助手2.5\UPX.dll,#1
      2⤵
        PID:4564

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4564-0-0x0000000010000000-0x000000001004D000-memory.dmp

      Filesize

      308KB