Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

1bc0ae0c8c...42.dll

windows7-x64

1

1bc0ae0c8c...42.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 08:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1bc0ae0c8cde86c1e49e7671505a6def554cb62f951786b834d74f252a81bf42.dll

  • Size

    3.5MB

  • MD5

    6358169f884ee87b8c0b2712c755b4af

  • SHA1

    8da435d804feb03294388ac9bf0405da87a9b984

  • SHA256

    1bc0ae0c8cde86c1e49e7671505a6def554cb62f951786b834d74f252a81bf42

  • SHA512

    aad59aa8c80873eb3d50f51f7bbb5be21c3585336034c962568b5e551db5a4f35be1f3255331d1cb2c9efb352b499d243702e30fc10bf4cdc5801d935ea09393

  • SSDEEP

    49152:WwApIj2UwOmhJfOkNqZbPxrH4jP/A7+Lc37acfmWd/5gPzpuOEeMzj+TALICmwde:Wrmj3EA6qNJ7F7yTWnRYEeMzj7BxMxB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1bc0ae0c8cde86c1e49e7671505a6def554cb62f951786b834d74f252a81bf42.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2288-6-0x000007FEF5BA0000-0x000007FEF613D000-memory.dmp

    Filesize

    5.6MB

    Download

  • memory/2288-5-0x0000000077B10000-0x0000000077B12000-memory.dmp

    Filesize

    8KB

    Download

  • memory/2288-3-0x0000000077B10000-0x0000000077B12000-memory.dmp

    Filesize

    8KB

    Download

  • memory/2288-1-0x0000000077B10000-0x0000000077B12000-memory.dmp

    Filesize

    8KB

    Download

  • memory/2288-0-0x000007FEF5BC3000-0x000007FEF5DBF000-memory.dmp

    Filesize

    2.0MB

    Download

  • memory/2288-9-0x000007FEF5BA0000-0x000007FEF613D000-memory.dmp

    Filesize

    5.6MB

    Download