Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
10/05/2024, 10:38
Behavioral task
behavioral1
Sample
Sniper Elite V2 v1.0 + 4 Trainer.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Sniper Elite V2 v1.0 + 4 Trainer.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
dbghelp.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
dbghelp.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
游侠网专题导航-游侠网中国单机游戏门户.url
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
游侠网专题导航-游侠网中国单机游戏门户.url
Resource
win10v2004-20240508-en
General
-
Target
dbghelp.dll
-
Size
1.2MB
-
MD5
4003e34416ebd25e4c115d49dc15e1a7
-
SHA1
faf95ec65cde5bd833ce610bb8523363310ec4ad
-
SHA256
c06430b8cb025be506be50a756488e1bcc3827c4f45158d93e4e3eeb98ce1e4f
-
SHA512
88f5d417377cd62bde417640a79b6ac493e80f0c8b1f63a99378a2a67695ef8e4a541cedb91acfa296ed608e821fee466983806f0d082ed2e74b0cd93eb4fb84
-
SSDEEP
24576:9AkmijauMug/iyFzb2DfsPV8A4C2vNI1cPdf8xZLGNfav9T:9WiOuRg/iyFzb2QN83XfeYaZ
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1644 wrote to memory of 1872 1644 rundll32.exe 28 PID 1644 wrote to memory of 1872 1644 rundll32.exe 28 PID 1644 wrote to memory of 1872 1644 rundll32.exe 28 PID 1644 wrote to memory of 1872 1644 rundll32.exe 28 PID 1644 wrote to memory of 1872 1644 rundll32.exe 28 PID 1644 wrote to memory of 1872 1644 rundll32.exe 28 PID 1644 wrote to memory of 1872 1644 rundll32.exe 28