Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
114s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
21/08/2024, 17:05
Static task
static1
Behavioral task
behavioral1
Sample
3ab6f13ba4d1a9367a95592fe0ad5ac0N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ab6f13ba4d1a9367a95592fe0ad5ac0N.dll
Resource
win10v2004-20240802-en
General
-
Target
3ab6f13ba4d1a9367a95592fe0ad5ac0N.dll
-
Size
1.2MB
-
MD5
3ab6f13ba4d1a9367a95592fe0ad5ac0
-
SHA1
8b4bc0145253d54da616e2439ddad0bdac60f5e5
-
SHA256
504c3c987c5a9c52027b6cb019c265090c6ca3b1361594e01fc00145768a053b
-
SHA512
1486c65e457fedb1743c338c3607a8a836b5e11d5597d33209bd514ef6990003478bb54041bd950defa24a1bd266320a51fcf70b3e0c5081e4cfc5584f7bb8be
-
SSDEEP
24576:89X8ODnoxNSvt4eYr+DM9R9l+mv3ZnON0xZiJv3VOsuzWpVRSWjKcNGmFEuOJ59m:1ODmNUyeYSDM9R9l+mv3ZnON0xZiJv3h
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3ab6f13ba4d1a9367a95592fe0ad5ac0N.dll,#11⤵PID:4932
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4440,i,6510295916244954942,10164894160290787457,262144 --variations-seed-version --mojo-platform-channel-handle=3828 /prefetch:81⤵PID:4472