Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    35s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    18/03/2023, 00:24

General

  • Target

    Undertale/mus_yourbestfriend_3.ogg

  • Size

    385KB

  • MD5

    4db7618e3368b5e09706c6761994870e

  • SHA1

    4734a5de85eeda35aca2e40d6c01eb779c73450d

  • SHA256

    e5f09f660805d7c24838d1166e269691169a89c8c439b45b8299ec8f60a93f21

  • SHA512

    756b5a8dc2003c42936354c86153a14952007c4a1fc48b1827015f558475319020c7f522ad9d6477532d280e2c35b2a3b61ee2584656ef56388ee6c1fca0df1a

  • SSDEEP

    6144:nzpCviezy81+84hpbN4gyJJCTnD1ndslLe94RdMGQt9EGdWztOSMk9nWMto28p04:NCvD2hsgQJMok9NzW5JMkhWMto28pEYN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Undertale\mus_yourbestfriend_3.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1176
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x15c
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1176-59-0x000000013F6A0000-0x000000013F798000-memory.dmp

    Filesize

    992KB

  • memory/1176-60-0x000007FEF6B20000-0x000007FEF6B54000-memory.dmp

    Filesize

    208KB

  • memory/1176-61-0x000007FEF65C0000-0x000007FEF6874000-memory.dmp

    Filesize

    2.7MB

  • memory/1176-69-0x000007FEF62D0000-0x000007FEF64D0000-memory.dmp

    Filesize

    2.0MB

  • memory/1176-68-0x000007FEF6540000-0x000007FEF6551000-memory.dmp

    Filesize

    68KB

  • memory/1176-67-0x000007FEF6560000-0x000007FEF657D000-memory.dmp

    Filesize

    116KB

  • memory/1176-66-0x000007FEF6580000-0x000007FEF6591000-memory.dmp

    Filesize

    68KB

  • memory/1176-65-0x000007FEF65A0000-0x000007FEF65B7000-memory.dmp

    Filesize

    92KB

  • memory/1176-64-0x000007FEF69B0000-0x000007FEF69C1000-memory.dmp

    Filesize

    68KB

  • memory/1176-63-0x000007FEF69D0000-0x000007FEF69E7000-memory.dmp

    Filesize

    92KB

  • memory/1176-62-0x000007FEFB7B0000-0x000007FEFB7C8000-memory.dmp

    Filesize

    96KB

  • memory/1176-70-0x000007FEF5220000-0x000007FEF62CB000-memory.dmp

    Filesize

    16.7MB

  • memory/1176-71-0x000007FEF51E0000-0x000007FEF521F000-memory.dmp

    Filesize

    252KB

  • memory/1176-72-0x000007FEF6510000-0x000007FEF6531000-memory.dmp

    Filesize

    132KB

  • memory/1176-73-0x000007FEF51C0000-0x000007FEF51D8000-memory.dmp

    Filesize

    96KB

  • memory/1176-74-0x000007FEF51A0000-0x000007FEF51B1000-memory.dmp

    Filesize

    68KB

  • memory/1176-75-0x000007FEF5180000-0x000007FEF5191000-memory.dmp

    Filesize

    68KB

  • memory/1176-76-0x000007FEF5160000-0x000007FEF5171000-memory.dmp

    Filesize

    68KB

  • memory/1176-77-0x000007FEF5140000-0x000007FEF515B000-memory.dmp

    Filesize

    108KB

  • memory/1176-78-0x000007FEF5120000-0x000007FEF5131000-memory.dmp

    Filesize

    68KB

  • memory/1176-79-0x000007FEF5100000-0x000007FEF5118000-memory.dmp

    Filesize

    96KB

  • memory/1176-80-0x000007FEF50D0000-0x000007FEF5100000-memory.dmp

    Filesize

    192KB

  • memory/1176-81-0x000007FEF5060000-0x000007FEF50C7000-memory.dmp

    Filesize

    412KB

  • memory/1176-82-0x000007FEF4FF0000-0x000007FEF505F000-memory.dmp

    Filesize

    444KB

  • memory/1176-83-0x000007FEF4FD0000-0x000007FEF4FE1000-memory.dmp

    Filesize

    68KB

  • memory/1176-84-0x000007FEF4F70000-0x000007FEF4FCC000-memory.dmp

    Filesize

    368KB

  • memory/1176-86-0x000007FEF4DD0000-0x000007FEF4DE7000-memory.dmp

    Filesize

    92KB

  • memory/1176-87-0x000007FEF7530000-0x000007FEF7540000-memory.dmp

    Filesize

    64KB

  • memory/1176-85-0x000007FEF4DF0000-0x000007FEF4F68000-memory.dmp

    Filesize

    1.5MB

  • memory/1176-88-0x000007FEF4DA0000-0x000007FEF4DCF000-memory.dmp

    Filesize

    188KB

  • memory/1176-89-0x000007FEF4D80000-0x000007FEF4D91000-memory.dmp

    Filesize

    68KB

  • memory/1176-90-0x000007FEF4D60000-0x000007FEF4D76000-memory.dmp

    Filesize

    88KB

  • memory/1176-91-0x000007FEF4C90000-0x000007FEF4D55000-memory.dmp

    Filesize

    788KB

  • memory/1176-92-0x000007FEF4C70000-0x000007FEF4C85000-memory.dmp

    Filesize

    84KB

  • memory/1176-93-0x000007FEF4930000-0x000007FEF4941000-memory.dmp

    Filesize

    68KB

  • memory/1176-94-0x000007FEF4910000-0x000007FEF4922000-memory.dmp

    Filesize

    72KB

  • memory/1176-95-0x000007FEF4790000-0x000007FEF490A000-memory.dmp

    Filesize

    1.5MB

  • memory/1176-107-0x000007FEF5220000-0x000007FEF62CB000-memory.dmp

    Filesize

    16.7MB