Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
24/05/2024, 13:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ReAgent.dll
Resource
win7-20240508-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ReAgent.dll
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
ReAgent.dll
-
Size
242KB
-
MD5
3cc04cb09fafad87942437fddee11ee3
-
SHA1
141bbc74fb3329d5bf2574ed163fc83680ba733f
-
SHA256
9a5023058aba16edd42de38447888bbbcced803c32297e21376e24a9defeff1e
-
SHA512
76b19f4596b20c104a24530abbd613b0e4d1b21e6e2d7e1902c6a669b6ce164d320206745d747a904e348337e2a39bb527e54f0de3816982139c0bb9628ae5ac
-
SSDEEP
6144:LAbBU7pSQl38vaD8q+nYPFK1ztA2t4FWWY:V7dYa5KYOCFW
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2180 wrote to memory of 2204 2180 rundll32.exe 28 PID 2180 wrote to memory of 2204 2180 rundll32.exe 28 PID 2180 wrote to memory of 2204 2180 rundll32.exe 28 PID 2180 wrote to memory of 2204 2180 rundll32.exe 28 PID 2180 wrote to memory of 2204 2180 rundll32.exe 28 PID 2180 wrote to memory of 2204 2180 rundll32.exe 28 PID 2180 wrote to memory of 2204 2180 rundll32.exe 28