Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 15:34 UTC

General

  • Target

    Plugins/Gracenote/CDDBUIWinamp.dll

  • Size

    784KB

  • MD5

    5740a882f76717834c30ddd0adcb0d0d

  • SHA1

    534c374cf095f63afca507c2a4c2b12b28394525

  • SHA256

    25a9409220f2265b8d641bc6454f9d3d3eeb7f204166eee603b69a26d286b89f

  • SHA512

    702bbd0b4204a67092111e293eea27223cc0df2fea06be89122ae646d948ed97432271be1fb92e5713c03bd2dce10500fa398f57bf39b599370f4b0bb8e788ad

  • SSDEEP

    6144:VHNpbhQMCDdtU5f+zDZhCu+obLClII++JlYAHAE9TDTz4COC4ry:VNpbh5z5f+vZhCnULClIewAHb4lry

Score
1/10

Malware Config

Signatures

  • Modifies registry class 64 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\Plugins\Gracenote\CDDBUIWinamp.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:668
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\Plugins\Gracenote\CDDBUIWinamp.dll
      2⤵
      • Modifies registry class
      PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.