Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

suyu-windo...re.dll

windows7-x64

1

suyu-windo...re.dll

windows10-2004-x64

1

suyu-windo...ui.dll

windows7-x64

1

suyu-windo...ui.dll

windows10-2004-x64

1

suyu-windo...ia.dll

windows7-x64

1

suyu-windo...ia.dll

windows10-2004-x64

1

suyu-windo...rk.dll

windows7-x64

1

suyu-windo...rk.dll

windows10-2004-x64

1

suyu-windo...ts.dll

windows7-x64

1

suyu-windo...ts.dll

windows10-2004-x64

1

suyu-windo...L2.dll

windows7-x64

1

suyu-windo...L2.dll

windows10-2004-x64

1

suyu-windo...60.dll

windows7-x64

1

suyu-windo...60.dll

windows10-2004-x64

1

suyu-windo...-9.dll

windows7-x64

1

suyu-windo...-9.dll

windows10-2004-x64

1

suyu-windo...58.dll

windows7-x64

1

suyu-windo...58.dll

windows10-2004-x64

1

suyu-windo...if.dll

windows7-x64

1

suyu-windo...if.dll

windows10-2004-x64

1

suyu-windo...co.dll

windows7-x64

1

suyu-windo...co.dll

windows10-2004-x64

1

suyu-windo...eg.dll

windows7-x64

1

suyu-windo...eg.dll

windows10-2004-x64

1

suyu-windo...on.dll

windows7-x64

1

suyu-windo...on.dll

windows10-2004-x64

1

suyu-windo...ec.dll

windows7-x64

1

suyu-windo...ec.dll

windows10-2004-x64

1

suyu-windo...nc.dll

windows7-x64

1

suyu-windo...nc.dll

windows10-2004-x64

1

suyu-windo...-1.dll

windows7-x64

1

suyu-windo...-1.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    142s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 01:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    suyu-windows-mingw-20240410-0de49070e4_/avutil-58.dll

  • Size

    948KB

  • MD5

    ce08a4d6f95afb71937a3f303bf782f3

  • SHA1

    96f11c41f6fef3dd9ec57400892aa3cd9a764c3f

  • SHA256

    720c5e2e6d63f1fcaacefb307295abb4f7ea1b4ca3a34303c1d37bb43e3889f5

  • SHA512

    c82331d51eb50ac397858070330dc722bd6902990adc79636fd908d6f2b055bbd6b120c2585df87a6f8e805c8c66378b240a11a66799ca6d38715b5a6a0b455a

  • SSDEEP

    12288:nf3jeNxwYyACmqLzN8VTyCLrq9kBYgYkQRMe+ugMSr/:nreNxjwmqLzN8V+C/rYcrR/

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\suyu-windows-mingw-20240410-0de49070e4_\avutil-58.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1704
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 1704 -s 96
      2⤵
        PID:2416

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1704-1-0x000007FEFB380000-0x000007FEFB397000-memory.dmp

      Filesize

      92KB

      Download

    • memory/1704-0-0x000007FEF5C10000-0x000007FEF5E17000-memory.dmp

      Filesize

      2.0MB

      Download