Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
23/12/2024, 13:52
Static task
static1
Behavioral task
behavioral1
Sample
bole4d.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
bole4d.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
documents.lnk
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
documents.lnk
Resource
win10v2004-20241007-en
General
-
Target
bole4d.dll
-
Size
486KB
-
MD5
1c27d92924f0cdeac60ba81ec9d8b74c
-
SHA1
263a07d97d25ac30a5db224788fad1185a2ad3f3
-
SHA256
486835ad5b265b100bdbfa99a0eba9a190db33ed31fa239fa6767a8f6bd84190
-
SHA512
f42d2050a9d30cd9e36691f6ef94319b20eb0c44bd412dbabd3f9c2f698e68b9f5bf723123eba23ac4a2fd6ad20b7b2da67b506755769bc14b19446313c317f0
-
SSDEEP
6144:IdDesj36g4GoH1PH6Ej97Rje49pJLAdDc4bUDl0YhAmfOH4APm:I1X6g4bNaEjNxez6lzA
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1684 wrote to memory of 2080 1684 rundll32.exe 30 PID 1684 wrote to memory of 2080 1684 rundll32.exe 30 PID 1684 wrote to memory of 2080 1684 rundll32.exe 30