Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26/05/2024, 12:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TSpkg.dll
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
TSpkg.dll
Resource
win10v2004-20240426-en
2 signatures
150 seconds
General
-
Target
TSpkg.dll
-
Size
76KB
-
MD5
9945f0c9c1944e3d6c49f74f67b6c0d0
-
SHA1
c017a0b9449c4b1292901c41a6312907fe0d8e6f
-
SHA256
f518e99b980ef40a6480e0bccdce3a1abc07e18be6db21fa987c297b32b8af08
-
SHA512
9dafd2480a30b03dfa4a1766d8aec45f8772c39f91e690fb57204946b621e9b7fa4a4daaeae19bd4594fa681939b41cbb12ca379af61dd5204ecd4a2205df959
-
SSDEEP
1536:GBqIofSInrKOS1tTvKVEDUJFXjUIiaoqNK0HGHTtOJvOMHUPT:YofRnrkvKqDUvXYYlNK0HGHTcwMHUP
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2992 wrote to memory of 1632 2992 rundll32.exe 28 PID 2992 wrote to memory of 1632 2992 rundll32.exe 28 PID 2992 wrote to memory of 1632 2992 rundll32.exe 28 PID 2992 wrote to memory of 1632 2992 rundll32.exe 28 PID 2992 wrote to memory of 1632 2992 rundll32.exe 28 PID 2992 wrote to memory of 1632 2992 rundll32.exe 28 PID 2992 wrote to memory of 1632 2992 rundll32.exe 28