Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    35s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2023, 13:26

General

  • Target

    Clip Studio Paint EX v2.0.0/PASSWORD HERE.mp4

  • Size

    8.7MB

  • MD5

    dbf77071bb0b7a6f674b3e62c2044c82

  • SHA1

    32b81afabca850d3645f3d2737a1d7c5e8822155

  • SHA256

    e7b60036345e870b6e5b57cb3aabb0d5c0bc7f9fd49ff020b94e9da6eb4c94f4

  • SHA512

    bbc3f954bb9abe76245ab445a6619dcd01a80fae58653d15ef4e653853ce582a6e0164a4d4caf53a029b2a7be6d44c88d14b16b671bc4e182a7dfdcadd07b840

  • SSDEEP

    196608:0hw9qaE531OCl5M5d7EQ0Z8Cq3FpmzZFCbXqcUd1LfHRj76A:0iG31OCloYQYXqFYtFCXULLp6A

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 27 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Clip Studio Paint EX v2.0.0\PASSWORD HERE.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1980
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x558
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1980-59-0x000000013F8D0000-0x000000013F9C8000-memory.dmp

    Filesize

    992KB

  • memory/1980-60-0x000007FEFB550000-0x000007FEFB584000-memory.dmp

    Filesize

    208KB

  • memory/1980-61-0x000007FEF6910000-0x000007FEF6BC4000-memory.dmp

    Filesize

    2.7MB

  • memory/1980-68-0x000007FEF6E70000-0x000007FEF6E81000-memory.dmp

    Filesize

    68KB

  • memory/1980-67-0x000007FEF6E90000-0x000007FEF6EAD000-memory.dmp

    Filesize

    116KB

  • memory/1980-66-0x000007FEF7340000-0x000007FEF7351000-memory.dmp

    Filesize

    68KB

  • memory/1980-65-0x000007FEF7360000-0x000007FEF7377000-memory.dmp

    Filesize

    92KB

  • memory/1980-69-0x000007FEF6690000-0x000007FEF6890000-memory.dmp

    Filesize

    2.0MB

  • memory/1980-70-0x000007FEF6E30000-0x000007FEF6E6F000-memory.dmp

    Filesize

    252KB

  • memory/1980-64-0x000007FEFB270000-0x000007FEFB281000-memory.dmp

    Filesize

    68KB

  • memory/1980-63-0x000007FEFB290000-0x000007FEFB2A7000-memory.dmp

    Filesize

    92KB

  • memory/1980-62-0x000007FEFB8E0000-0x000007FEFB8F8000-memory.dmp

    Filesize

    96KB

  • memory/1980-71-0x000007FEF55E0000-0x000007FEF668B000-memory.dmp

    Filesize

    16.7MB

  • memory/1980-83-0x000007FEF68F0000-0x000007FEF6901000-memory.dmp

    Filesize

    68KB

  • memory/1980-84-0x000007FEF54A0000-0x000007FEF54F6000-memory.dmp

    Filesize

    344KB

  • memory/1980-82-0x000007FEF5500000-0x000007FEF556F000-memory.dmp

    Filesize

    444KB

  • memory/1980-81-0x000007FEF5570000-0x000007FEF55D7000-memory.dmp

    Filesize

    412KB

  • memory/1980-85-0x000007FEF5320000-0x000007FEF5498000-memory.dmp

    Filesize

    1.5MB

  • memory/1980-86-0x000007FEF68D0000-0x000007FEF68E7000-memory.dmp

    Filesize

    92KB

  • memory/1980-80-0x000007FEF6CF0000-0x000007FEF6D20000-memory.dmp

    Filesize

    192KB

  • memory/1980-79-0x000007FEF6D20000-0x000007FEF6D38000-memory.dmp

    Filesize

    96KB

  • memory/1980-78-0x000007FEF6D40000-0x000007FEF6D51000-memory.dmp

    Filesize

    68KB

  • memory/1980-77-0x000007FEF6D60000-0x000007FEF6D7B000-memory.dmp

    Filesize

    108KB

  • memory/1980-87-0x000007FEF51B0000-0x000007FEF5320000-memory.dmp

    Filesize

    1.4MB

  • memory/1980-90-0x000007FEF50F0000-0x000007FEF513C000-memory.dmp

    Filesize

    304KB

  • memory/1980-91-0x000007FEF4F80000-0x000007FEF50EB000-memory.dmp

    Filesize

    1.4MB

  • memory/1980-92-0x000007FEF4F20000-0x000007FEF4F77000-memory.dmp

    Filesize

    348KB

  • memory/1980-89-0x000007FEF5140000-0x000007FEF5182000-memory.dmp

    Filesize

    264KB

  • memory/1980-88-0x000007FEF5190000-0x000007FEF51A2000-memory.dmp

    Filesize

    72KB

  • memory/1980-76-0x000007FEF6D80000-0x000007FEF6D91000-memory.dmp

    Filesize

    68KB

  • memory/1980-93-0x000007FEF4CD0000-0x000007FEF4F1B000-memory.dmp

    Filesize

    2.3MB

  • memory/1980-75-0x000007FEF6DA0000-0x000007FEF6DB1000-memory.dmp

    Filesize

    68KB

  • memory/1980-74-0x000007FEF6DC0000-0x000007FEF6DD1000-memory.dmp

    Filesize

    68KB

  • memory/1980-73-0x000007FEF6DE0000-0x000007FEF6DF8000-memory.dmp

    Filesize

    96KB

  • memory/1980-72-0x000007FEF6E00000-0x000007FEF6E21000-memory.dmp

    Filesize

    132KB

  • memory/1980-96-0x000007FEF34F0000-0x000007FEF351F000-memory.dmp

    Filesize

    188KB

  • memory/1980-100-0x000007FEF3360000-0x000007FEF33D5000-memory.dmp

    Filesize

    468KB

  • memory/1980-101-0x000007FEF32F0000-0x000007FEF3352000-memory.dmp

    Filesize

    392KB

  • memory/1980-102-0x000007FEF3280000-0x000007FEF32ED000-memory.dmp

    Filesize

    436KB

  • memory/1980-103-0x000007FEF3260000-0x000007FEF3273000-memory.dmp

    Filesize

    76KB

  • memory/1980-104-0x000007FEF3240000-0x000007FEF3254000-memory.dmp

    Filesize

    80KB

  • memory/1980-105-0x000007FEF31F0000-0x000007FEF3240000-memory.dmp

    Filesize

    320KB

  • memory/1980-106-0x000007FEF31D0000-0x000007FEF31E5000-memory.dmp

    Filesize

    84KB

  • memory/1980-99-0x000007FEF33E0000-0x000007FEF34A5000-memory.dmp

    Filesize

    788KB

  • memory/1980-98-0x000007FEF34B0000-0x000007FEF34C6000-memory.dmp

    Filesize

    88KB

  • memory/1980-107-0x000007FEF2FB0000-0x000007FEF31CD000-memory.dmp

    Filesize

    2.1MB

  • memory/1980-110-0x000007FEF2F40000-0x000007FEF2F53000-memory.dmp

    Filesize

    76KB

  • memory/1980-117-0x000007FEF2D70000-0x000007FEF2D83000-memory.dmp

    Filesize

    76KB

  • memory/1980-118-0x000007FEF2D50000-0x000007FEF2D64000-memory.dmp

    Filesize

    80KB

  • memory/1980-120-0x000007FEF2D10000-0x000007FEF2D25000-memory.dmp

    Filesize

    84KB

  • memory/1980-122-0x000007FEF2CD0000-0x000007FEF2CE1000-memory.dmp

    Filesize

    68KB

  • memory/1980-121-0x000007FEF2CF0000-0x000007FEF2D05000-memory.dmp

    Filesize

    84KB

  • memory/1980-119-0x000007FEF2D30000-0x000007FEF2D42000-memory.dmp

    Filesize

    72KB

  • memory/1980-116-0x000007FEF2D90000-0x000007FEF2DA5000-memory.dmp

    Filesize

    84KB

  • memory/1980-115-0x000007FEF2DB0000-0x000007FEF2DC2000-memory.dmp

    Filesize

    72KB

  • memory/1980-114-0x000007FEF2DD0000-0x000007FEF2DEB000-memory.dmp

    Filesize

    108KB

  • memory/1980-113-0x000007FEF2DF0000-0x000007FEF2E03000-memory.dmp

    Filesize

    76KB

  • memory/1980-112-0x000007FEF2E10000-0x000007FEF2E3A000-memory.dmp

    Filesize

    168KB

  • memory/1980-111-0x000007FEF2E40000-0x000007FEF2F34000-memory.dmp

    Filesize

    976KB

  • memory/1980-109-0x000007FEF2F60000-0x000007FEF2F83000-memory.dmp

    Filesize

    140KB

  • memory/1980-108-0x000007FEF2F90000-0x000007FEF2FA5000-memory.dmp

    Filesize

    84KB

  • memory/1980-97-0x000007FEF34D0000-0x000007FEF34E1000-memory.dmp

    Filesize

    68KB

  • memory/1980-94-0x000007FEF3520000-0x000007FEF4CD0000-memory.dmp

    Filesize

    23.7MB

  • memory/1980-95-0x000007FEFB540000-0x000007FEFB550000-memory.dmp

    Filesize

    64KB