Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
24/05/2024, 13:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ReAgent.dll
Resource
win7-20240508-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ReAgent.dll
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
ReAgent.dll
-
Size
242KB
-
MD5
3cc04cb09fafad87942437fddee11ee3
-
SHA1
141bbc74fb3329d5bf2574ed163fc83680ba733f
-
SHA256
9a5023058aba16edd42de38447888bbbcced803c32297e21376e24a9defeff1e
-
SHA512
76b19f4596b20c104a24530abbd613b0e4d1b21e6e2d7e1902c6a669b6ce164d320206745d747a904e348337e2a39bb527e54f0de3816982139c0bb9628ae5ac
-
SSDEEP
6144:LAbBU7pSQl38vaD8q+nYPFK1ztA2t4FWWY:V7dYa5KYOCFW
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4392 wrote to memory of 4868 4392 rundll32.exe 82 PID 4392 wrote to memory of 4868 4392 rundll32.exe 82 PID 4392 wrote to memory of 4868 4392 rundll32.exe 82