Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    24s
  • max time network
    20s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    06/07/2024, 20:58

General

  • Target

    libeay32.dll

  • Size

    482KB

  • MD5

    c2703965b8ba0ecf8c5d8a043976facc

  • SHA1

    c578c694d4fe5c15acc3b7aa60e9874d0ded3d54

  • SHA256

    e28e34fbdaff077669586dcdb4e10f0ba2ca6c9973ed4d372a5c3ec3b8ad20e7

  • SHA512

    cb729665206594928a90b29e5c7592120345e92a605122ec6aea564250c4d5d48e1d39c8803820eccde7920aa4d9af99fb3748671de076476d833710b9491d61

  • SSDEEP

    6144:GyAl+J4uce42ylALXYsGB9ZaPEZ3ahnZHFiZlfK/d77ycLFG4683UyS7zooSQQ1z:1Al5SbK0E4Z0EE413UyyzooSTVL

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\libeay32.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2480
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\libeay32.dll,#1
      2⤵
        PID:3044

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3044-0-0x0000000010000000-0x0000000010149000-memory.dmp

      Filesize

      1.3MB

    • memory/3044-1-0x0000000010000000-0x0000000010149000-memory.dmp

      Filesize

      1.3MB

    • memory/3044-2-0x0000000010000000-0x0000000010149000-memory.dmp

      Filesize

      1.3MB

    • memory/3044-3-0x0000000010000000-0x0000000010149000-memory.dmp

      Filesize

      1.3MB

    • memory/3044-4-0x0000000010000000-0x0000000010149000-memory.dmp

      Filesize

      1.3MB