Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
53s -
max time network
66s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
06/07/2024, 20:58
Behavioral task
behavioral1
Sample
dos.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dos.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
libeay32.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
libeay32.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
ssleay32.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
ssleay32.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
ucmyqb.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
ucmyqb.dll
Resource
win10v2004-20240704-en
General
-
Target
ssleay32.dll
-
Size
106KB
-
MD5
931c97553b3319f21b9ef249aa3cd244
-
SHA1
42c6611da2154bb6e0911993cf97071908b48bf2
-
SHA256
7e643c188a1ee3b0251b7dfcab000b7c48fd840eff35189e8a45901852e3910a
-
SHA512
790141b758aa68c6384aaf6f85b09f9bc641a300a4e7fa05a74c3f89af090fbbfdcfe3dce24842a8d0c75b874839d505692c1951ed66f57e9840c559820514d3
-
SSDEEP
3072:7/NkvneF5fIzOLshJ/E2IJYuB4/aoutq:Lq/wAJO28R8aoS
Malware Config
Signatures
-
resource yara_rule behavioral6/memory/4788-2-0x00000000028D0000-0x0000000002A19000-memory.dmp upx behavioral6/memory/4788-1-0x00000000028D0000-0x0000000002A19000-memory.dmp upx behavioral6/memory/4788-0-0x0000000010000000-0x000000001004C000-memory.dmp upx behavioral6/memory/4788-3-0x00000000028D0000-0x0000000002A19000-memory.dmp upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 932 wrote to memory of 4788 932 rundll32.exe 81 PID 932 wrote to memory of 4788 932 rundll32.exe 81 PID 932 wrote to memory of 4788 932 rundll32.exe 81