Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    80s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    24/04/2023, 13:31

General

  • Target

    jskqdhkqsjndbhkjsqhd.mp4

  • Size

    66.8MB

  • MD5

    6215e191bd6a6cb1f29d8b0bec90e04e

  • SHA1

    a531d582c4f73e4629903bfc21729c00754c93b9

  • SHA256

    26084484651332f81546ae5bbcaaa3048ce621074a6bd81eae1e65622f2d6b1c

  • SHA512

    7160247c42968edb9fcd19dc54dbcfdbe370b09fa30e24287798a9cb7cac24b5339d3204e7922b3257c10a12d13872c89cfd05c4304cb74ff62a57e16f47a725

  • SSDEEP

    1572864:21/2yZWJJDDfc7xokcxPHQ2Ld9yuFe4BbF/df6:21+yZWLDbca//zdYuFeW1S

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 39 IoCs
  • Suspicious use of SendNotifyMessage 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\jskqdhkqsjndbhkjsqhd.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1224
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x564
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1224-59-0x000000013FAF0000-0x000000013FBE8000-memory.dmp

    Filesize

    992KB

  • memory/1224-60-0x000007FEF7230000-0x000007FEF7264000-memory.dmp

    Filesize

    208KB

  • memory/1224-61-0x000007FEF6840000-0x000007FEF6AF4000-memory.dmp

    Filesize

    2.7MB

  • memory/1224-62-0x000007FEFBBD0000-0x000007FEFBBE8000-memory.dmp

    Filesize

    96KB

  • memory/1224-63-0x000007FEF7210000-0x000007FEF7227000-memory.dmp

    Filesize

    92KB

  • memory/1224-64-0x000007FEF6C90000-0x000007FEF6CA1000-memory.dmp

    Filesize

    68KB

  • memory/1224-66-0x000007FEF6C50000-0x000007FEF6C61000-memory.dmp

    Filesize

    68KB

  • memory/1224-67-0x000007FEF6C30000-0x000007FEF6C4D000-memory.dmp

    Filesize

    116KB

  • memory/1224-68-0x000007FEF6820000-0x000007FEF6831000-memory.dmp

    Filesize

    68KB

  • memory/1224-69-0x000007FEF65C0000-0x000007FEF67C0000-memory.dmp

    Filesize

    2.0MB

  • memory/1224-70-0x000007FEF6580000-0x000007FEF65BF000-memory.dmp

    Filesize

    252KB

  • memory/1224-65-0x000007FEF6C70000-0x000007FEF6C87000-memory.dmp

    Filesize

    92KB

  • memory/1224-71-0x000007FEF54D0000-0x000007FEF657B000-memory.dmp

    Filesize

    16.7MB

  • memory/1224-80-0x000007FEF53B0000-0x000007FEF53E0000-memory.dmp

    Filesize

    192KB

  • memory/1224-81-0x000007FEF5340000-0x000007FEF53A7000-memory.dmp

    Filesize

    412KB

  • memory/1224-82-0x000007FEF52D0000-0x000007FEF533F000-memory.dmp

    Filesize

    444KB

  • memory/1224-83-0x000007FEF52B0000-0x000007FEF52C1000-memory.dmp

    Filesize

    68KB

  • memory/1224-84-0x000007FEF5250000-0x000007FEF52A6000-memory.dmp

    Filesize

    344KB

  • memory/1224-79-0x000007FEF53E0000-0x000007FEF53F8000-memory.dmp

    Filesize

    96KB

  • memory/1224-78-0x000007FEF5400000-0x000007FEF5411000-memory.dmp

    Filesize

    68KB

  • memory/1224-85-0x000007FEF50D0000-0x000007FEF5248000-memory.dmp

    Filesize

    1.5MB

  • memory/1224-77-0x000007FEF5420000-0x000007FEF543B000-memory.dmp

    Filesize

    108KB

  • memory/1224-86-0x000007FEF50B0000-0x000007FEF50C7000-memory.dmp

    Filesize

    92KB

  • memory/1224-76-0x000007FEF5440000-0x000007FEF5451000-memory.dmp

    Filesize

    68KB

  • memory/1224-75-0x000007FEF5460000-0x000007FEF5471000-memory.dmp

    Filesize

    68KB

  • memory/1224-87-0x000007FEF4F40000-0x000007FEF50B0000-memory.dmp

    Filesize

    1.4MB

  • memory/1224-88-0x000007FEF4F20000-0x000007FEF4F32000-memory.dmp

    Filesize

    72KB

  • memory/1224-89-0x000007FEF4ED0000-0x000007FEF4F12000-memory.dmp

    Filesize

    264KB

  • memory/1224-90-0x000007FEF4E80000-0x000007FEF4ECC000-memory.dmp

    Filesize

    304KB

  • memory/1224-74-0x000007FEF5480000-0x000007FEF5491000-memory.dmp

    Filesize

    68KB

  • memory/1224-73-0x000007FEF6800000-0x000007FEF6818000-memory.dmp

    Filesize

    96KB

  • memory/1224-72-0x000007FEF54A0000-0x000007FEF54C1000-memory.dmp

    Filesize

    132KB

  • memory/1224-91-0x000007FEF4D10000-0x000007FEF4E7B000-memory.dmp

    Filesize

    1.4MB

  • memory/1224-92-0x000007FEF4CB0000-0x000007FEF4D07000-memory.dmp

    Filesize

    348KB

  • memory/1224-93-0x000007FEF4A60000-0x000007FEF4CAB000-memory.dmp

    Filesize

    2.3MB

  • memory/1224-101-0x000007FEF3080000-0x000007FEF30E2000-memory.dmp

    Filesize

    392KB

  • memory/1224-100-0x000007FEF30F0000-0x000007FEF3165000-memory.dmp

    Filesize

    468KB

  • memory/1224-99-0x000007FEF3170000-0x000007FEF3235000-memory.dmp

    Filesize

    788KB

  • memory/1224-102-0x000007FEF3010000-0x000007FEF307D000-memory.dmp

    Filesize

    436KB

  • memory/1224-103-0x000007FEF2FF0000-0x000007FEF3003000-memory.dmp

    Filesize

    76KB

  • memory/1224-105-0x000007FEF2F80000-0x000007FEF2FD0000-memory.dmp

    Filesize

    320KB

  • memory/1224-104-0x000007FEF2FD0000-0x000007FEF2FE4000-memory.dmp

    Filesize

    80KB

  • memory/1224-106-0x000007FEF2F60000-0x000007FEF2F75000-memory.dmp

    Filesize

    84KB

  • memory/1224-98-0x000007FEF3240000-0x000007FEF3256000-memory.dmp

    Filesize

    88KB

  • memory/1224-97-0x000007FEF3260000-0x000007FEF3271000-memory.dmp

    Filesize

    68KB

  • memory/1224-96-0x000007FEF3280000-0x000007FEF32AF000-memory.dmp

    Filesize

    188KB

  • memory/1224-108-0x000007FEF2D20000-0x000007FEF2D35000-memory.dmp

    Filesize

    84KB

  • memory/1224-109-0x000007FEF2CF0000-0x000007FEF2D13000-memory.dmp

    Filesize

    140KB

  • memory/1224-110-0x000007FEF2CD0000-0x000007FEF2CE3000-memory.dmp

    Filesize

    76KB

  • memory/1224-107-0x000007FEF2D40000-0x000007FEF2F5D000-memory.dmp

    Filesize

    2.1MB

  • memory/1224-111-0x000007FEF2BD0000-0x000007FEF2CC4000-memory.dmp

    Filesize

    976KB

  • memory/1224-112-0x000007FEF2BA0000-0x000007FEF2BCA000-memory.dmp

    Filesize

    168KB

  • memory/1224-122-0x000007FEF2A60000-0x000007FEF2A71000-memory.dmp

    Filesize

    68KB

  • memory/1224-121-0x000007FEF2A80000-0x000007FEF2A95000-memory.dmp

    Filesize

    84KB

  • memory/1224-120-0x000007FEF2AA0000-0x000007FEF2AB5000-memory.dmp

    Filesize

    84KB

  • memory/1224-119-0x000007FEF2AC0000-0x000007FEF2AD2000-memory.dmp

    Filesize

    72KB

  • memory/1224-118-0x000007FEF2AE0000-0x000007FEF2AF4000-memory.dmp

    Filesize

    80KB

  • memory/1224-117-0x000007FEF2B00000-0x000007FEF2B13000-memory.dmp

    Filesize

    76KB

  • memory/1224-116-0x000007FEF2B20000-0x000007FEF2B35000-memory.dmp

    Filesize

    84KB

  • memory/1224-115-0x000007FEF2B40000-0x000007FEF2B52000-memory.dmp

    Filesize

    72KB

  • memory/1224-114-0x000007FEF2B60000-0x000007FEF2B7B000-memory.dmp

    Filesize

    108KB

  • memory/1224-113-0x000007FEF2B80000-0x000007FEF2B93000-memory.dmp

    Filesize

    76KB

  • memory/1224-95-0x000007FEFA890000-0x000007FEFA8A0000-memory.dmp

    Filesize

    64KB

  • memory/1224-94-0x000007FEF32B0000-0x000007FEF4A60000-memory.dmp

    Filesize

    23.7MB