Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    10/08/2024, 06:30

General

  • Target

    noinstall/autorun/dlls/MonoDataCollector64.dll

  • Size

    220KB

  • MD5

    6b2ce7688e20c69295307f37518c3d82

  • SHA1

    fbabade6e6596570f47d99a7318176b784cc9950

  • SHA256

    eb4b0f32c93ba24d84a4e45cb56abab68bc05f857217cc9319feaf1925e831fe

  • SHA512

    6ec14e6d4cdb7d7eac3b96d8d5f8e22921d0ba3e1527ab39f934220a478305642ace3f186245aa980e07205e539c31d922fdfa2ac2046f70cd42e491044538b6

  • SSDEEP

    3072:LxEwnfcog9mELFOMsTFTPLTuMXJPDSvky54MpOBm+k7K7Ai29QnOd8zBzf25:LxIVd6ZLTt1OvkyKMpN55i2jgxe5

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\noinstall\autorun\dlls\MonoDataCollector64.dll,#1
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:2300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads