Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

Release/dl...ed.dll

windows7-x64

1

Release/dl...ed.dll

windows10-2004-x64

1

Release/loader.exe

windows7-x64

7

Release/loader.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    537s
  • max time network
    1147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/08/2024, 00:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Release/dlls/fortnite_undetected.dll

  • Size

    609KB

  • MD5

    81b84eebbfa9bdadc4f657863ce35e7c

  • SHA1

    c3be75fdc41791679cf073ba652123b63d26c416

  • SHA256

    a3d2ffc09ef0582cd4e72cd2117cf647a190d2bfb8dc3f36dd6ad72a3161c155

  • SHA512

    8127427064f5695c349ce69838a6916c6f792192a5e692eff8f53fdaa4943f4245d173c95838b10e91542bd264f9638f869fb76669b2af8be2e134687545a073

  • SSDEEP

    12288:U4sF+HRf6NFkPcFn00xygoLOk1nqMYqRg7SUqN9z:I+xf6cPcFnBsLOk1nqMJbUsl

Score
1/10

Malware Config

Signatures

  • Modifies registry class 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Release\dlls\fortnite_undetected.dll,#1
    1⤵
      PID:3416
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:4072
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:1368

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3416-0-0x00007FFF7BAC4000-0x00007FFF7BAC5000-memory.dmp

        Filesize

        4KB

        Download