Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17/08/2024, 03:08
General
-
Target
$SYSDIR/avformat-lav-53.dll
-
Size
983KB
-
MD5
6664880fb8eb8f673dbe1c523529895d
-
SHA1
b8a7e75d062c499f642bfb90e52b01b418b51afe
-
SHA256
1733932d9c61cd43cc7ca4179a9d568448371012cfb5441fcc1cc3da52dc03b1
-
SHA512
6cc1035e9676df1d95396da6a2c8020ec90ef3ea86890cbf815375705da78d80cbc5302462dce0daf6f46e8f6f10242c31daebcc8b85b295c69383b33c12c72b
-
SSDEEP
24576:DRfI2ULZqxageBwvSa2bwXhhNE0F46TUrAz7Qtd+sm4geTJNGmKJ+05:1fxxaN5a2EXhJK6bQL+sGeTGmKJ+q
Malware Config
Signatures
-
Program crash 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$SYSDIR\avformat-lav-53.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$SYSDIR\avformat-lav-53.dll,#12⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1156 -s 6043⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1156 -ip 11561⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
4.4MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
10.7MB
-
Filesize
4.4MB