Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    398s
  • max time network
    401s
  • platform
    windows7_x64
  • resource
    win7-20230621-es
  • resource tags

    arch:x64arch:x86image:win7-20230621-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    29/06/2023, 05:04

General

  • Target

    Tiktok_video-1.mp4

  • Size

    695KB

  • MD5

    69db621989058b35f1e055df8f31b9a7

  • SHA1

    70d1dd38ee50469a775ef398d426d16bafeb2116

  • SHA256

    9f5cffa8b530875eeca2df6da13fe208d184033bbce7e81a316365c8de009cbe

  • SHA512

    7e9eeaa1dbe461dbf677c78582b5ca7c02bbb84a324341e24dc5b051f4314618089c8df34ff4ac7e000a9660c7c8c3ddd2c0bd12dc5959f78d554df9829e3470

  • SSDEEP

    12288:qsK8N6eOTsuu10YmejS17vtbqXdm5Cv1qWQPzQNJX1QDOEeZ:q2ROT8100jS17VmXZvQzbQNJX13EeZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 42 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Tiktok_video-1.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2036
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x530
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2036-60-0x000007FEFB550000-0x000007FEFB584000-memory.dmp

    Filesize

    208KB

  • memory/2036-59-0x000000013FCF0000-0x000000013FDE8000-memory.dmp

    Filesize

    992KB

  • memory/2036-61-0x000007FEF6BA0000-0x000007FEF6E54000-memory.dmp

    Filesize

    2.7MB

  • memory/2036-69-0x000007FEF68B0000-0x000007FEF6AB0000-memory.dmp

    Filesize

    2.0MB

  • memory/2036-68-0x000007FEFB290000-0x000007FEFB2A1000-memory.dmp

    Filesize

    68KB

  • memory/2036-67-0x000007FEFB440000-0x000007FEFB45D000-memory.dmp

    Filesize

    116KB

  • memory/2036-66-0x000007FEFB460000-0x000007FEFB471000-memory.dmp

    Filesize

    68KB

  • memory/2036-65-0x000007FEFB480000-0x000007FEFB497000-memory.dmp

    Filesize

    92KB

  • memory/2036-64-0x000007FEFB4A0000-0x000007FEFB4B1000-memory.dmp

    Filesize

    68KB

  • memory/2036-63-0x000007FEFB4C0000-0x000007FEFB4D7000-memory.dmp

    Filesize

    92KB

  • memory/2036-62-0x000007FEFBB80000-0x000007FEFBB98000-memory.dmp

    Filesize

    96KB

  • memory/2036-78-0x000007FEF6FF0000-0x000007FEF7001000-memory.dmp

    Filesize

    68KB

  • memory/2036-81-0x000007FEF5790000-0x000007FEF57F7000-memory.dmp

    Filesize

    412KB

  • memory/2036-80-0x000007FEF6FA0000-0x000007FEF6FD0000-memory.dmp

    Filesize

    192KB

  • memory/2036-82-0x000007FEF5720000-0x000007FEF578F000-memory.dmp

    Filesize

    444KB

  • memory/2036-83-0x000007FEF6F80000-0x000007FEF6F91000-memory.dmp

    Filesize

    68KB

  • memory/2036-84-0x000007FEF56C0000-0x000007FEF5716000-memory.dmp

    Filesize

    344KB

  • memory/2036-79-0x000007FEF6FD0000-0x000007FEF6FE8000-memory.dmp

    Filesize

    96KB

  • memory/2036-85-0x000007FEF5540000-0x000007FEF56B8000-memory.dmp

    Filesize

    1.5MB

  • memory/2036-86-0x000007FEF6B80000-0x000007FEF6B97000-memory.dmp

    Filesize

    92KB

  • memory/2036-70-0x000007FEF5800000-0x000007FEF68AB000-memory.dmp

    Filesize

    16.7MB

  • memory/2036-77-0x000007FEF7B10000-0x000007FEF7B2B000-memory.dmp

    Filesize

    108KB

  • memory/2036-76-0x000007FEFAF30000-0x000007FEFAF41000-memory.dmp

    Filesize

    68KB

  • memory/2036-90-0x000007FEF5330000-0x000007FEF537C000-memory.dmp

    Filesize

    304KB

  • memory/2036-89-0x000007FEF5380000-0x000007FEF53C2000-memory.dmp

    Filesize

    264KB

  • memory/2036-88-0x000007FEF6B60000-0x000007FEF6B72000-memory.dmp

    Filesize

    72KB

  • memory/2036-91-0x000007FEF51C0000-0x000007FEF532B000-memory.dmp

    Filesize

    1.4MB

  • memory/2036-87-0x000007FEF53D0000-0x000007FEF5540000-memory.dmp

    Filesize

    1.4MB

  • memory/2036-75-0x000007FEFAF50000-0x000007FEFAF61000-memory.dmp

    Filesize

    68KB

  • memory/2036-92-0x000007FEF5160000-0x000007FEF51B7000-memory.dmp

    Filesize

    348KB

  • memory/2036-74-0x000007FEFAF70000-0x000007FEFAF81000-memory.dmp

    Filesize

    68KB

  • memory/2036-93-0x000007FEF4F10000-0x000007FEF515B000-memory.dmp

    Filesize

    2.3MB

  • memory/2036-73-0x000007FEFB200000-0x000007FEFB218000-memory.dmp

    Filesize

    96KB

  • memory/2036-72-0x000007FEFB220000-0x000007FEFB241000-memory.dmp

    Filesize

    132KB

  • memory/2036-71-0x000007FEFB250000-0x000007FEFB28F000-memory.dmp

    Filesize

    252KB

  • memory/2036-94-0x000007FEF3760000-0x000007FEF4F10000-memory.dmp

    Filesize

    23.7MB

  • memory/2036-100-0x000007FEF35A0000-0x000007FEF3615000-memory.dmp

    Filesize

    468KB

  • memory/2036-99-0x000007FEF3620000-0x000007FEF36E5000-memory.dmp

    Filesize

    788KB

  • memory/2036-101-0x000007FEF3530000-0x000007FEF3592000-memory.dmp

    Filesize

    392KB

  • memory/2036-103-0x000007FEF34A0000-0x000007FEF34B3000-memory.dmp

    Filesize

    76KB

  • memory/2036-104-0x000007FEF3480000-0x000007FEF3494000-memory.dmp

    Filesize

    80KB

  • memory/2036-105-0x000007FEF3430000-0x000007FEF3480000-memory.dmp

    Filesize

    320KB

  • memory/2036-102-0x000007FEF34C0000-0x000007FEF352D000-memory.dmp

    Filesize

    436KB

  • memory/2036-106-0x000007FEF3370000-0x000007FEF342D000-memory.dmp

    Filesize

    756KB

  • memory/2036-98-0x000007FEF36F0000-0x000007FEF3706000-memory.dmp

    Filesize

    88KB

  • memory/2036-107-0x000007FEF3340000-0x000007FEF3370000-memory.dmp

    Filesize

    192KB

  • memory/2036-112-0x000007FEF30E0000-0x000007FEF30F5000-memory.dmp

    Filesize

    84KB

  • memory/2036-124-0x000007FEF2E60000-0x000007FEF2E75000-memory.dmp

    Filesize

    84KB

  • memory/2036-123-0x000007FEF2E80000-0x000007FEF2E92000-memory.dmp

    Filesize

    72KB

  • memory/2036-122-0x000007FEF2EA0000-0x000007FEF2EB4000-memory.dmp

    Filesize

    80KB

  • memory/2036-121-0x000007FEF2EC0000-0x000007FEF2ED3000-memory.dmp

    Filesize

    76KB

  • memory/2036-120-0x000007FEF2EE0000-0x000007FEF2EF5000-memory.dmp

    Filesize

    84KB

  • memory/2036-119-0x000007FEF2F00000-0x000007FEF2F12000-memory.dmp

    Filesize

    72KB

  • memory/2036-118-0x000007FEF2F20000-0x000007FEF2F3B000-memory.dmp

    Filesize

    108KB

  • memory/2036-117-0x000007FEF2F40000-0x000007FEF2F53000-memory.dmp

    Filesize

    76KB

  • memory/2036-116-0x000007FEF2F60000-0x000007FEF2F8A000-memory.dmp

    Filesize

    168KB

  • memory/2036-115-0x000007FEF2F90000-0x000007FEF3084000-memory.dmp

    Filesize

    976KB

  • memory/2036-114-0x000007FEF3090000-0x000007FEF30A3000-memory.dmp

    Filesize

    76KB

  • memory/2036-113-0x000007FEF30B0000-0x000007FEF30D3000-memory.dmp

    Filesize

    140KB

  • memory/2036-111-0x000007FEF3100000-0x000007FEF3115000-memory.dmp

    Filesize

    84KB

  • memory/2036-110-0x000007FEF3120000-0x000007FEF333D000-memory.dmp

    Filesize

    2.1MB

  • memory/2036-97-0x000007FEF3710000-0x000007FEF3721000-memory.dmp

    Filesize

    68KB

  • memory/2036-96-0x000007FEF3730000-0x000007FEF375F000-memory.dmp

    Filesize

    188KB

  • memory/2036-95-0x000007FEFB430000-0x000007FEFB440000-memory.dmp

    Filesize

    64KB