Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

a45d6ade78...e0.dll

windows7-x64

1

a45d6ade78...e0.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    95s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/09/2024, 03:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a45d6ade78cf32be239dcae7ca2c785b8ec71d9f8024428c24cfdd8a7d3dd3e0.dll

  • Size

    3.5MB

  • MD5

    36cb29aa6c302b63d5d7108b81594c1c

  • SHA1

    fdb1fad5ae2cfd6b422733c8b7f1132baf494629

  • SHA256

    a45d6ade78cf32be239dcae7ca2c785b8ec71d9f8024428c24cfdd8a7d3dd3e0

  • SHA512

    756f3c9d6a92f82180db60b98f153c959e2460b65b3e2af98b4143004dad4c3f22effbb990845eb6c3b534879fda7cbaab52aacbd741036c1db001de2650c87c

  • SSDEEP

    49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zW:8QKotcTlBk9YwzEhPbYzjmMtccXk8KC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\a45d6ade78cf32be239dcae7ca2c785b8ec71d9f8024428c24cfdd8a7d3dd3e0.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1492-0-0x00007FFF42E53000-0x00007FFF43052000-memory.dmp

    Filesize

    2.0MB

    Download

  • memory/1492-2-0x00007FFF42E30000-0x00007FFF433D8000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/1492-5-0x00007FFF42E30000-0x00007FFF433D8000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/1492-1-0x00007FFF60B90000-0x00007FFF60B92000-memory.dmp

    Filesize

    8KB

    Download