Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

office2019...us.exe

windows7-x64

1

office2019...us.exe

windows10-2004-x64

1

office2019...za.dll

windows7-x64

3

office2019...za.dll

windows10-2004-x64

3

office2019...za.exe

windows7-x64

1

office2019...za.exe

windows10-2004-x64

1

office2019...xa.dll

windows7-x64

3

office2019...xa.dll

windows10-2004-x64

3

office2019...rm.exe

windows7-x64

7

office2019...rm.exe

windows10-2004-x64

7

office2019...2c.exe

windows7-x64

1

office2019...2c.exe

windows10-2004-x64

1

office2019...71.dll

windows7-x64

1

office2019...71.dll

windows10-2004-x64

1

office2019...id.dll

windows7-x64

1

office2019...id.dll

windows10-2004-x64

1

office2019...ne.dll

windows7-x64

7

office2019...ne.dll

windows10-2004-x64

7

office2019...71.dll

windows7-x64

3

office2019...71.dll

windows10-2004-x64

3

office2019...71.dll

windows7-x64

3

office2019...71.dll

windows10-2004-x64

3

office2019...dl.dll

windows7-x64

7

office2019...dl.dll

windows10-2004-x64

7

office2019...b1.dll

windows7-x64

7

office2019...b1.dll

windows10-2004-x64

7

office2019...PP.vbs

windows7-x64

8

office2019...PP.vbs

windows10-2004-x64

8

office2019...cn.vbs

windows7-x64

8

office2019...cn.vbs

windows10-2004-x64

8

office2019...RM.exe

windows7-x64

1

office2019...RM.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    92s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/05/2024, 11:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    office2019pjb_9435/office2019pjb/OTool/files/Thunder/atl71.dll

  • Size

    87KB

  • MD5

    79cb6457c81ada9eb7f2087ce799aaa7

  • SHA1

    322ddde439d9254182f5945be8d97e9d897561ae

  • SHA256

    a68e1297fae2bcf854b47ffa444f490353028de1fa2ca713b6cf6cc5aa22b88a

  • SHA512

    eca4b91109d105b2ce8c40710b8e3309c4cc944194843b7930e06daf3d1df6ae85c1b7063036c7e5cd10276e5e5535b33e49930adbad88166228316283d011b8

  • SSDEEP

    1536:kIlL9T5Xx1ogKMvw5Br7KLKLI+Xe+QnyH4Cc0tR6nGVp/VTbkE0DJ4ZwmroV:BtvBOI+FQny5R6nG//SdaZwms

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\office2019pjb_9435\office2019pjb\OTool\files\Thunder\atl71.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2312
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\office2019pjb_9435\office2019pjb\OTool\files\Thunder\atl71.dll,#1
      2⤵
        PID:2300

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads