Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    92s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/09/2024, 01:57

General

  • Target

    ae1e41b3d2a3f37f36d433f73dd37290N.dll

  • Size

    3.5MB

  • MD5

    ae1e41b3d2a3f37f36d433f73dd37290

  • SHA1

    ac007bedc363ce62e1547f042cf34746dd3ca1d4

  • SHA256

    48c9e7f124da622ca46471f72a1550f2641a1123cc8beb8a805efbb9c8f81163

  • SHA512

    eff25e3783dd09fbdfe0275455690eaefd2a202807302f0460aaaf7ee415cff85e1f1b20534106e453bc42148b551c85545cd8e0bd232cce3f98958c8ec152ef

  • SSDEEP

    49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zI:8QKotcTlBk9YwzEhPbYzjmMtccXk8KM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ae1e41b3d2a3f37f36d433f73dd37290N.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4784-0-0x00007FFC012D3000-0x00007FFC014D2000-memory.dmp

    Filesize

    2.0MB

  • memory/4784-1-0x00007FFC1F010000-0x00007FFC1F012000-memory.dmp

    Filesize

    8KB

  • memory/4784-5-0x00007FFC012B0000-0x00007FFC01858000-memory.dmp

    Filesize

    5.7MB