Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    31s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    06/06/2023, 15:48

General

  • Target

    tu-madre-tiene-una-p-lla-que-ya-la-quisiera-yo-by-voicemod.mp3

  • Size

    303KB

  • MD5

    66851caa5218ecfe658073c888e7a235

  • SHA1

    a60dc679151a7b9db5cc86604a6a7f844f16db2f

  • SHA256

    a5b67d1afaec7548b1113625e4b5c3101c452aa0b295dbcc341722556341fb11

  • SHA512

    8e2dee6d2a110c09203b4b63c3516e554e2b2bc0ccedd1ecf89b93231937befc498e42f81ca6d90f6e46bc237f40cf59280aef598b07a97b66abe3de102a9eb7

  • SSDEEP

    6144:DFe/ep2Ll0GOnp8JXIDiP/FeOK+pfyLvapckLTEav/kIrkhWHjTKnb:DFe2pmjQYIsO+pfiaptEav/kSkhWPUb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\tu-madre-tiene-una-p-lla-que-ya-la-quisiera-yo-by-voicemod.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:920
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x260
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/920-59-0x000000013F7D0000-0x000000013F8C8000-memory.dmp

    Filesize

    992KB

  • memory/920-60-0x000007FEFA640000-0x000007FEFA674000-memory.dmp

    Filesize

    208KB

  • memory/920-68-0x000007FEF68D0000-0x000007FEF68E1000-memory.dmp

    Filesize

    68KB

  • memory/920-69-0x000007FEF6260000-0x000007FEF6460000-memory.dmp

    Filesize

    2.0MB

  • memory/920-67-0x000007FEF68F0000-0x000007FEF690D000-memory.dmp

    Filesize

    116KB

  • memory/920-66-0x000007FEF6910000-0x000007FEF6921000-memory.dmp

    Filesize

    68KB

  • memory/920-65-0x000007FEF6930000-0x000007FEF6947000-memory.dmp

    Filesize

    92KB

  • memory/920-64-0x000007FEFA600000-0x000007FEFA611000-memory.dmp

    Filesize

    68KB

  • memory/920-63-0x000007FEFA620000-0x000007FEFA637000-memory.dmp

    Filesize

    92KB

  • memory/920-62-0x000007FEFB7B0000-0x000007FEFB7C8000-memory.dmp

    Filesize

    96KB

  • memory/920-61-0x000007FEF64E0000-0x000007FEF6794000-memory.dmp

    Filesize

    2.7MB

  • memory/920-70-0x000007FEF51B0000-0x000007FEF625B000-memory.dmp

    Filesize

    16.7MB

  • memory/920-92-0x000007FEF4D50000-0x000007FEF4D61000-memory.dmp

    Filesize

    68KB

  • memory/920-93-0x000007FEF4D30000-0x000007FEF4D44000-memory.dmp

    Filesize

    80KB

  • memory/920-95-0x000007FEF4CF0000-0x000007FEF4D04000-memory.dmp

    Filesize

    80KB

  • memory/920-97-0x000007FEF4CB0000-0x000007FEF4CC6000-memory.dmp

    Filesize

    88KB

  • memory/920-98-0x000007FEF4C90000-0x000007FEF4CA5000-memory.dmp

    Filesize

    84KB

  • memory/920-100-0x000007FEF4C40000-0x000007FEF4C6C000-memory.dmp

    Filesize

    176KB

  • memory/920-101-0x000007FEF4C20000-0x000007FEF4C32000-memory.dmp

    Filesize

    72KB

  • memory/920-102-0x000007FEF4BF0000-0x000007FEF4C20000-memory.dmp

    Filesize

    192KB

  • memory/920-103-0x000007FEF4BD0000-0x000007FEF4BE7000-memory.dmp

    Filesize

    92KB

  • memory/920-99-0x000007FEF4C70000-0x000007FEF4C84000-memory.dmp

    Filesize

    80KB

  • memory/920-96-0x000007FEF4CD0000-0x000007FEF4CEE000-memory.dmp

    Filesize

    120KB

  • memory/920-94-0x000007FEF4D10000-0x000007FEF4D22000-memory.dmp

    Filesize

    72KB

  • memory/920-91-0x000007FEF4D70000-0x000007FEF4D82000-memory.dmp

    Filesize

    72KB

  • memory/920-90-0x000007FEF4D90000-0x000007FEF4E55000-memory.dmp

    Filesize

    788KB

  • memory/920-89-0x000007FEF4E60000-0x000007FEF4E71000-memory.dmp

    Filesize

    68KB

  • memory/920-88-0x000007FEF4E80000-0x000007FEF4E93000-memory.dmp

    Filesize

    76KB

  • memory/920-87-0x000007FEF4EA0000-0x000007FEF4ECF000-memory.dmp

    Filesize

    188KB

  • memory/920-86-0x000007FEF4ED0000-0x000007FEF4F27000-memory.dmp

    Filesize

    348KB

  • memory/920-85-0x000007FEF4F30000-0x000007FEF4F41000-memory.dmp

    Filesize

    68KB

  • memory/920-84-0x000007FEF4F50000-0x000007FEF4F67000-memory.dmp

    Filesize

    92KB

  • memory/920-106-0x000007FEF4B90000-0x000007FEF4BA2000-memory.dmp

    Filesize

    72KB

  • memory/920-115-0x000007FEF47F0000-0x000007FEF4852000-memory.dmp

    Filesize

    392KB

  • memory/920-116-0x000007FEF4780000-0x000007FEF47ED000-memory.dmp

    Filesize

    436KB

  • memory/920-117-0x000007FEF4760000-0x000007FEF4775000-memory.dmp

    Filesize

    84KB

  • memory/920-118-0x000007FEF4420000-0x000007FEF4431000-memory.dmp

    Filesize

    68KB

  • memory/920-119-0x000007FEF4400000-0x000007FEF4412000-memory.dmp

    Filesize

    72KB

  • memory/920-114-0x000007FEF4860000-0x000007FEF48D5000-memory.dmp

    Filesize

    468KB

  • memory/920-113-0x000007FEF48E0000-0x000007FEF48F6000-memory.dmp

    Filesize

    88KB

  • memory/920-112-0x000007FEF7450000-0x000007FEF7460000-memory.dmp

    Filesize

    64KB

  • memory/920-111-0x000007FEF4900000-0x000007FEF4924000-memory.dmp

    Filesize

    144KB

  • memory/920-120-0x000007FEF4280000-0x000007FEF43FA000-memory.dmp

    Filesize

    1.5MB

  • memory/920-110-0x000007FEF4AE0000-0x000007FEF4B08000-memory.dmp

    Filesize

    160KB

  • memory/920-109-0x000007FEF4B10000-0x000007FEF4B66000-memory.dmp

    Filesize

    344KB

  • memory/920-108-0x000007FEF4B70000-0x000007FEF4B87000-memory.dmp

    Filesize

    92KB

  • memory/920-107-0x000007FEF4930000-0x000007FEF4AA8000-memory.dmp

    Filesize

    1.5MB

  • memory/920-104-0x000007FEF28F0000-0x000007FEF40A0000-memory.dmp

    Filesize

    23.7MB

  • memory/920-105-0x000007FEF4BB0000-0x000007FEF4BC1000-memory.dmp

    Filesize

    68KB

  • memory/920-83-0x000007FEF4F70000-0x000007FEF4F81000-memory.dmp

    Filesize

    68KB

  • memory/920-82-0x000007FEF4F90000-0x000007FEF4FFF000-memory.dmp

    Filesize

    444KB

  • memory/920-81-0x000007FEF5000000-0x000007FEF5067000-memory.dmp

    Filesize

    412KB

  • memory/920-80-0x000007FEF5070000-0x000007FEF50A0000-memory.dmp

    Filesize

    192KB

  • memory/920-79-0x000007FEF50A0000-0x000007FEF50B8000-memory.dmp

    Filesize

    96KB

  • memory/920-78-0x000007FEF50C0000-0x000007FEF50D1000-memory.dmp

    Filesize

    68KB

  • memory/920-77-0x000007FEF50E0000-0x000007FEF50FB000-memory.dmp

    Filesize

    108KB

  • memory/920-76-0x000007FEF5100000-0x000007FEF5111000-memory.dmp

    Filesize

    68KB

  • memory/920-75-0x000007FEF5120000-0x000007FEF5131000-memory.dmp

    Filesize

    68KB

  • memory/920-74-0x000007FEF5140000-0x000007FEF5151000-memory.dmp

    Filesize

    68KB

  • memory/920-73-0x000007FEF5160000-0x000007FEF5178000-memory.dmp

    Filesize

    96KB

  • memory/920-72-0x000007FEF5180000-0x000007FEF51A1000-memory.dmp

    Filesize

    132KB

  • memory/920-71-0x000007FEF64A0000-0x000007FEF64DF000-memory.dmp

    Filesize

    252KB