Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1756s -
max time network
1765s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
13/06/2024, 10:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CL54XX.dll
Resource
win10v2004-20240508-en
1 signatures
1800 seconds
Behavioral task
behavioral2
Sample
CL54XX.sys
Resource
win10v2004-20240508-en
0 signatures
1800 seconds
Behavioral task
behavioral3
Sample
MONISEL.dll
Resource
win10v2004-20240508-en
2 signatures
1800 seconds
General
-
Target
CL54XX.dll
-
Size
90KB
-
MD5
7b20265a8ede1b9bd54f7601e3aa08ce
-
SHA1
a44031fa9bc48384d6046c56b2f68bbf7720db7d
-
SHA256
50a33f1c7a39e2ac833604df1388735627fae0a1720cdc5772699ed7481f7a5f
-
SHA512
18bce6b7b2b0c9931ef35247f0e86c2c68693e67806a7e75039ef8465693a7b1a9ac72711de88cada1370299f0ed555f133e1cc54fedd2b69ca74f735465df9c
-
SSDEEP
1536:Xu0nu0bEHA3uX+x5JhQQONS+GrgWeJwUgSDW9oxrNB+oj8Qp:Xu8bEHA3uX+xTCLULkWeJwUgfaxrNgQ5
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 336 wrote to memory of 4660 336 rundll32.exe 81 PID 336 wrote to memory of 4660 336 rundll32.exe 81 PID 336 wrote to memory of 4660 336 rundll32.exe 81