Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7imetool/IMETool.exe
windows7-x64
7imetool/IMETool.exe
windows10-2004-x64
7imetool/indicdll.dll
windows7-x64
1imetool/indicdll.dll
windows10-2004-x64
1imetool/internat.exe
windows7-x64
1imetool/internat.exe
windows10-2004-x64
1imetool/�...��.url
windows7-x64
1imetool/�...��.url
windows10-2004-x64
1Analysis
-
max time kernel
92s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
14/07/2024, 10:56
Behavioral task
behavioral1
Sample
imetool/IMETool.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
imetool/IMETool.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
imetool/indicdll.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
imetool/indicdll.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
imetool/internat.exe
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
imetool/internat.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
imetool/新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
imetool/新云软件.url
Resource
win10v2004-20240709-en
General
-
Target
imetool/indicdll.dll
-
Size
11KB
-
MD5
0416ddc2575d4afa613a3690a0a73e4a
-
SHA1
005a58706e24f09b86728d7aaa417d68899d544c
-
SHA256
a73fc0fa7745aa83273a45c8e5ae6c918a0910de8441c8437b653112d05864e5
-
SHA512
4b2e1b520ffea28e15b3573677c9f54c66cb351dba71da9b6051bbcc911c0c46af027ee9484e19b8f0c356e9a9847104d1e7e3f1100f272c9b52a9980c3ffc6a
-
SSDEEP
192:bcGAv3J5oZoqPLnwJc85Hi7o4uHWgWCWad:bO3XaoqPL2c+LpWgWCWU
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2448 wrote to memory of 4580 2448 rundll32.exe 83 PID 2448 wrote to memory of 4580 2448 rundll32.exe 83 PID 2448 wrote to memory of 4580 2448 rundll32.exe 83