Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
14s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
14/07/2024, 21:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
212e928a3a69a8842b0086c3f5e3daa0N.dll
Resource
win7-20240704-en
1 signatures
120 seconds
Behavioral task
behavioral2
Sample
212e928a3a69a8842b0086c3f5e3daa0N.dll
Resource
win10v2004-20240709-en
1 signatures
120 seconds
General
-
Target
212e928a3a69a8842b0086c3f5e3daa0N.dll
-
Size
6KB
-
MD5
212e928a3a69a8842b0086c3f5e3daa0
-
SHA1
71c10217813c28df5a3af711db4e371d8d2af897
-
SHA256
31b96f14af44880ea440a53f41edef339ae0e3c916b51a8b4426f7bd89ebad7f
-
SHA512
943063c0ede66837b4ce00050d506519a1d623a14aa07f1669893a4e070cbc69d72c8e022c6d9b00a70de1ba41a7e26e9b18dd25d5f72b594cb8d4ffcd986531
-
SSDEEP
48:6WQV5YVOqtV0H1pw9ygYVUG0cB+BDq9J5SC:8qtV0HAr45B+FqX5SC
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2268 wrote to memory of 2360 2268 rundll32.exe 30 PID 2268 wrote to memory of 2360 2268 rundll32.exe 30 PID 2268 wrote to memory of 2360 2268 rundll32.exe 30 PID 2268 wrote to memory of 2360 2268 rundll32.exe 30 PID 2268 wrote to memory of 2360 2268 rundll32.exe 30 PID 2268 wrote to memory of 2360 2268 rundll32.exe 30 PID 2268 wrote to memory of 2360 2268 rundll32.exe 30
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\212e928a3a69a8842b0086c3f5e3daa0N.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2268 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\212e928a3a69a8842b0086c3f5e3daa0N.dll,#12⤵PID:2360
-