Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 21:03

General

  • Target

    67ca20102c0669315b30f95a7b395cab32114cb4679afdf8ff3e6311487acda9.dll

  • Size

    2.7MB

  • MD5

    6ab981d54e75cc523918340f035723d8

  • SHA1

    818993b5ff5872cd10a96aa8de4d3ed2bd757d2f

  • SHA256

    67ca20102c0669315b30f95a7b395cab32114cb4679afdf8ff3e6311487acda9

  • SHA512

    e5f9f9d970f51c0d0350ecda60ffdaf5d12cda9fa04010bd2db9b357883d202d85ae2571cbc3db9e71fd9b82b9267511ccd72c249198e3adb3b8dd55a591d2b2

  • SSDEEP

    49152:oG2YLHE1SOpk+Wmpo+sEYYfoTbL47dKPizglzoL4fCo7DDvODkA7:oy1Opk+Wm++6SdKPR24KoHCb

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\67ca20102c0669315b30f95a7b395cab32114cb4679afdf8ff3e6311487acda9.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2192
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\67ca20102c0669315b30f95a7b395cab32114cb4679afdf8ff3e6311487acda9.dll,#1
      2⤵
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • Suspicious use of WriteProcessMemory
      PID:2988
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2988 -s 192
        3⤵
        • Program crash
        PID:12164

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2988-1-0x0000000010000000-0x0000000010449000-memory.dmp

    Filesize

    4.3MB

  • memory/2988-0-0x0000000010000000-0x0000000010449000-memory.dmp

    Filesize

    4.3MB

  • memory/2988-2-0x0000000075AC0000-0x0000000075B07000-memory.dmp

    Filesize

    284KB

  • memory/2988-434-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-426-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-418-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-408-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-441-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-466-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-470-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-469-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-468-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-467-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-465-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-464-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-463-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-462-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-461-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-460-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-458-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-457-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-456-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-455-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-454-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-459-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-453-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-452-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-450-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-449-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-448-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-447-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-446-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-445-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-444-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-442-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-440-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-439-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-438-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-437-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-436-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-435-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-433-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-432-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-431-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-430-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-429-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-428-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-427-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-425-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-424-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-423-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-422-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-421-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-420-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-419-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-417-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-416-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-415-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-414-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-413-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-412-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-411-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-410-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-409-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-451-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-443-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-1495-0x00000000023D0000-0x0000000002551000-memory.dmp

    Filesize

    1.5MB

  • memory/2988-1494-0x0000000002120000-0x0000000002220000-memory.dmp

    Filesize

    1024KB

  • memory/2988-4754-0x0000000002560000-0x0000000002671000-memory.dmp

    Filesize

    1.1MB

  • memory/2988-4761-0x0000000010001000-0x0000000010107000-memory.dmp

    Filesize

    1.0MB

  • memory/2988-4762-0x0000000002120000-0x0000000002220000-memory.dmp

    Filesize

    1024KB