Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

fdbe227832...a5.dll

windows7-x64

1

fdbe227832...a5.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 05:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fdbe22783271d4fc60b50ca6cfa87750d0be1739ddd7e54f897e2b374634bfa5.dll

  • Size

    3.5MB

  • MD5

    08f4ab118ce4453b6852444856f9b5e9

  • SHA1

    c07f1776e42e330a22f936725328fae898cd8d69

  • SHA256

    fdbe22783271d4fc60b50ca6cfa87750d0be1739ddd7e54f897e2b374634bfa5

  • SHA512

    29fd691a79f9614404180b54391856ae5afae1c2f2c272cc1c91ff31e587958d4e1fe8ae366e973605aff8bd37743e674b596d772cb8ba6a539b53d268f72a26

  • SSDEEP

    49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zh:8QKotcTlBk9YwzEhPbYzjmMtccXk8K9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\fdbe22783271d4fc60b50ca6cfa87750d0be1739ddd7e54f897e2b374634bfa5.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1388-0-0x000007FEF5D63000-0x000007FEF5F62000-memory.dmp

    Filesize

    2.0MB

    Download

  • memory/1388-3-0x0000000077740000-0x0000000077742000-memory.dmp

    Filesize

    8KB

    Download

  • memory/1388-1-0x0000000077740000-0x0000000077742000-memory.dmp

    Filesize

    8KB

    Download

  • memory/1388-5-0x0000000077740000-0x0000000077742000-memory.dmp

    Filesize

    8KB

    Download

  • memory/1388-9-0x000007FEF5D40000-0x000007FEF62E8000-memory.dmp

    Filesize

    5.7MB

    Download