Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 20:02

General

  • Target

    310013941d447cfc320ce410a880392b05a0986bff8e8c449e1a0f413020f31b.dll

  • Size

    2.5MB

  • MD5

    f0fb3e42854cebfea2da182afebf47af

  • SHA1

    b63493ed583b9aec2096a79152a1447e667830d5

  • SHA256

    310013941d447cfc320ce410a880392b05a0986bff8e8c449e1a0f413020f31b

  • SHA512

    4ef3d5bfe691e51333762be4f601276ce2bb443e7afba85b0d217399aacd9a8e1d248de6971b9c9dd159ef183fa448895a6e6421a0fb811ee8cf3f8c126b759e

  • SSDEEP

    49152:Fgi3PmnDiN+0BI/mQNpgAZb40zOaoiOPUGWbmKL4:R3PmnDeBomYpLZ/zwiOMGWf

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\310013941d447cfc320ce410a880392b05a0986bff8e8c449e1a0f413020f31b.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1224
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\310013941d447cfc320ce410a880392b05a0986bff8e8c449e1a0f413020f31b.dll,#1
      2⤵
        PID:2036

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2036-0-0x0000000010000000-0x0000000010278000-memory.dmp

      Filesize

      2.5MB

    • memory/2036-2-0x0000000000100000-0x0000000000106000-memory.dmp

      Filesize

      24KB

    • memory/2036-5-0x0000000000950000-0x0000000000A59000-memory.dmp

      Filesize

      1.0MB

    • memory/2036-9-0x0000000000B40000-0x0000000000C2F000-memory.dmp

      Filesize

      956KB

    • memory/2036-6-0x0000000000B40000-0x0000000000C2F000-memory.dmp

      Filesize

      956KB

    • memory/2036-10-0x0000000010000000-0x0000000010278000-memory.dmp

      Filesize

      2.5MB

    • memory/2036-15-0x0000000000B40000-0x0000000000C2F000-memory.dmp

      Filesize

      956KB

    • memory/2036-17-0x0000000003CE0000-0x0000000003DC2000-memory.dmp

      Filesize

      904KB

    • memory/2036-16-0x0000000002500000-0x0000000003CD2000-memory.dmp

      Filesize

      23.8MB

    • memory/2036-18-0x0000000003DD0000-0x0000000003EB0000-memory.dmp

      Filesize

      896KB

    • memory/2036-19-0x0000000003DD0000-0x0000000003EB0000-memory.dmp

      Filesize

      896KB

    • memory/2036-21-0x0000000003DD0000-0x0000000003EB0000-memory.dmp

      Filesize

      896KB

    • memory/2036-22-0x00000000000B0000-0x00000000000B2000-memory.dmp

      Filesize

      8KB

    • memory/2036-23-0x0000000064950000-0x0000000064954000-memory.dmp

      Filesize

      16KB