Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
116s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17/08/2024, 03:08
General
-
Target
$SYSDIR/avcodec-lav-53.dll
-
Size
6.1MB
-
MD5
b0e35230800d6c0242cbcdb59b8756e8
-
SHA1
7599be00ed9146a12be932471f94b3f9e89f122c
-
SHA256
a65265502a0050a8ae7f432a3629c299d5d8d1ebe7118dc8117026e4d3b22970
-
SHA512
d0751608e7eab4fa61e594ecf43b6a48d7a37f6ec064da691f195b11ee5393bdd89748020b892f2de0717ca05c815d3d474aecc5b8b1b8d2473dc008b9e5cfe3
-
SSDEEP
196608:YzQpdeTc29Dj5gyoiP34ddi111oz/R26cmne/+Z9lpP7Ilr:Y0pEjY5Ll5lpElr
Malware Config
Signatures
-
Program crash 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$SYSDIR\avcodec-lav-53.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$SYSDIR\avcodec-lav-53.dll,#12⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1716 -s 6043⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1716 -ip 17161⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
4.4MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
4.4MB