Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
24/05/2023, 15:06
230524-sg7hgada72 605/05/2023, 19:51
230505-yk45eaag22 105/05/2023, 19:47
230505-yhzf5sce61 605/05/2023, 19:44
230505-yf7dzaac46 605/05/2023, 19:37
230505-yb75psca8t 605/05/2023, 19:34
230505-x989zsbg8y 605/05/2023, 19:33
230505-x9hr2ahf39 605/05/2023, 18:11
230505-wsxn7aea5s 605/05/2023, 17:09
230505-vpajtabe99 6Analysis
-
max time kernel
143s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
05/05/2023, 19:34
Static task
static1
Behavioral task
behavioral1
Sample
df4brk2-5f3486a6-6e7e-42e1-a5b1-1b419ef75c9a.mp4
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
df4brk2-5f3486a6-6e7e-42e1-a5b1-1b419ef75c9a.mp4
Resource
win10v2004-20230220-en
General
-
Target
df4brk2-5f3486a6-6e7e-42e1-a5b1-1b419ef75c9a.mp4
-
Size
165KB
-
MD5
f5eafcc303576a4344588304f9a0cabd
-
SHA1
dedec3c11406d0356d9c5ea487f39306b95e29d5
-
SHA256
ddbbf34580df55639d25c93409532171c3d4230a7609d5909e1bff1f29979cb0
-
SHA512
502d52cc58fd3d65f4f71e1f220be45a235710a3dc1dd6514c39dff348395e1cc63672b7030b540eb172d50cc5e0be8882080552b981daef2b2df00eaba6c459
-
SSDEEP
3072:2YOSb2U5+6v3Bzq0OCj91PMYi0BsRFBlgo1NaCPl/VhfvAgedFSrK:MSY6v3B2yR1UYzsRFbgouO/jKFQK
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1396 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1396 vlc.exe -
Suspicious use of FindShellTrayWindow 28 IoCs
pid Process 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1396 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\df4brk2-5f3486a6-6e7e-42e1-a5b1-1b419ef75c9a.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1396