Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7CORE10k.exe
windows7-x64
7CORE10k.exe
windows10-2004-x64
7data/program1.exe
windows7-x64
7data/program1.exe
windows10-2004-x64
7data/zip.dll
windows7-x64
1data/zip.dll
windows10-2004-x64
3keygen.exe
windows7-x64
7keygen.exe
windows10-2004-x64
7访问零�...��.url
windows7-x64
1访问零�...��.url
windows10-2004-x64
1Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/06/2024, 03:18
Behavioral task
behavioral1
Sample
CORE10k.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
CORE10k.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
data/program1.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
data/program1.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
data/zip.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
data/zip.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
keygen.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
keygen.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
访问零度软件园获取更多资源.url
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
访问零度软件园获取更多资源.url
Resource
win10v2004-20240426-en
General
-
Target
data/zip.dll
-
Size
120KB
-
MD5
f483ca3411e7f5b278df6dabd1dfa2ea
-
SHA1
9fe776f8eb36b7aada0d08cb7fc8d7a0371c69ef
-
SHA256
3af8886e8f36c34cde502bafd06e967a7769f910f603a88cb91a9833f928a6c9
-
SHA512
d229dcd16b8e91fdadee68d5e42a79b1447091c6480bfb4aa0761c5c9035404991383dd7999ee431a0610aa716745ec28e221c115baf022252f8f20512d9d4f6
-
SSDEEP
3072:YOltoyFOxHTKiM+Kh+GBFOQMrTBfC4NS5S:IyFOxHTKf+KhFB0QMrTBq4D
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2088 wrote to memory of 2356 2088 rundll32.exe 28 PID 2088 wrote to memory of 2356 2088 rundll32.exe 28 PID 2088 wrote to memory of 2356 2088 rundll32.exe 28 PID 2088 wrote to memory of 2356 2088 rundll32.exe 28 PID 2088 wrote to memory of 2356 2088 rundll32.exe 28 PID 2088 wrote to memory of 2356 2088 rundll32.exe 28 PID 2088 wrote to memory of 2356 2088 rundll32.exe 28