Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    105s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/05/2024, 12:48

General

  • Target

    AppxApplicabilityEngine.dll

  • Size

    196KB

  • MD5

    c389ebe29edfe7848c9a6117e0f5a650

  • SHA1

    ec3f825bbdf935da69f16295bc7dd152de8fd4de

  • SHA256

    36c6bb9595b98e3418b557c2f583d84e42b082bf3db19a842d220711c9b1dd2e

  • SHA512

    3b8b77db8c05945296feb6371c6186bb8787ae38b0a57df1b33b3f2d27d6fda7c27655fe06f99ddf7a5851660acc10bd984a142d2612a54841716d48bb7b7d26

  • SSDEEP

    6144:aX45NbAr6/CLeVaKQRkfF9Dt/w/THQW1PF1sqW++6aWWGfs3j:aX45N86tVaKQRkfjDt/w/0WlF6xVWfw

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\AppxApplicabilityEngine.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1300
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\AppxApplicabilityEngine.dll,#1
      2⤵
        PID:4480

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads