Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
07/02/2025, 18:34
Behavioral task
behavioral1
Sample
c299fc8ebfeee79107c1a63c7b1c31520b5501574a97896f2ecbb422f87be151.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
c299fc8ebfeee79107c1a63c7b1c31520b5501574a97896f2ecbb422f87be151.dll
Resource
win10v2004-20250207-en
General
-
Target
c299fc8ebfeee79107c1a63c7b1c31520b5501574a97896f2ecbb422f87be151.dll
-
Size
2.1MB
-
MD5
90718247549148ea2c1603f2dd67bec1
-
SHA1
d22b26898078357833bcff8aecd2b7fc6e24d689
-
SHA256
c299fc8ebfeee79107c1a63c7b1c31520b5501574a97896f2ecbb422f87be151
-
SHA512
6bca9f47e8b04966d78cad8e402eacb1031d7682c850a61b36bafac887f917b26ba20ee2ac65283b9d50a0e5a631cbc98627be909a36503902331fe2fca95797
-
SSDEEP
49152:bGgJ3vE7rwsY5+a+h1cHkUnl/u9Zx/PgxeAaE+bK2i4rG:NavI5+qHxsgxeAenrG
Malware Config
Signatures
-
Blocklisted process makes network request 13 IoCs
flow pid Process 7 2596 rundll32.exe 9 2596 rundll32.exe 11 2596 rundll32.exe 13 2596 rundll32.exe 15 2596 rundll32.exe 18 2596 rundll32.exe 22 2596 rundll32.exe 26 2596 rundll32.exe 30 2596 rundll32.exe 34 2596 rundll32.exe 38 2596 rundll32.exe 43 2596 rundll32.exe 47 2596 rundll32.exe