Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3HotkeyControl.dll
windows7-x64
1HotkeyControl.dll
windows10-2004-x64
1SimpleSoundPlayer.exe
windows7-x64
1SimpleSoundPlayer.exe
windows10-2004-x64
3ikpFlac.dll
windows7-x64
1ikpFlac.dll
windows10-2004-x64
1ikpMP3.dll
windows7-x64
1ikpMP3.dll
windows10-2004-x64
1irrKlang.NET4.dll
windows7-x64
1irrKlang.NET4.dll
windows10-2004-x64
1Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
22/07/2023, 15:28
Static task
static1
Behavioral task
behavioral1
Sample
HotkeyControl.dll
Resource
win7-20230712-en
windows7-x64
Behavioral task
behavioral2
Sample
HotkeyControl.dll
Resource
win10v2004-20230703-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
SimpleSoundPlayer.exe
Resource
win7-20230712-en
windows7-x64
Behavioral task
behavioral4
Sample
SimpleSoundPlayer.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
ikpFlac.dll
Resource
win7-20230712-en
windows7-x64
Behavioral task
behavioral6
Sample
ikpFlac.dll
Resource
win10v2004-20230703-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
ikpMP3.dll
Resource
win7-20230712-en
windows7-x64
Behavioral task
behavioral8
Sample
ikpMP3.dll
Resource
win10v2004-20230703-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
irrKlang.NET4.dll
Resource
win7-20230712-en
windows7-x64
Behavioral task
behavioral10
Sample
irrKlang.NET4.dll
Resource
win10v2004-20230703-en
windows10-2004-x64
General
-
Target
HotkeyControl.dll
-
Size
7KB
-
MD5
a5ed8510282d48558a3db988fdc53af3
-
SHA1
ec0e6df86910a05a829c7afe7fa840e95e28e0b3
-
SHA256
624f30156fca9288ba34dc529cd7cb2b51d1d7819f5156e93bf3c65b2949dc5f
-
SHA512
00a517f505acbb5d440b3040c8a01c821addf2229793dce2949d567789467a60876e06563e963aa4531ca109785522ae2b7ea7b539d828b77146b92edc75213b
-
SSDEEP
96:ja54pWz+irwhMiBRBms9pW82h7JtFckZbFCkEg11tPMY0oYF3PJh7CXZ:jdWzv2W8w9t2kZ5xES1tMY0z
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2520 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2520 vlc.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe -
Suspicious use of SendNotifyMessage 64 IoCs
pid Process 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe 2520 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2520 vlc.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\HotkeyControl.dll,#11⤵PID:1080
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\UnlockInstall.m4v"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2520
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
78B
MD5aa74ae6398768d263731a5867d55ffef
SHA16bfef550c149bfc8c4333991906e9e03425308fa
SHA2568269cc077d280f02061bd816b6d9697717cd6f5287bc043795c5bcb338cb144e
SHA512bda5ba1871e0727417e8232f84cd0ff1a39c5093de98790b73d1ea44aaa20dce1247f9cbe1cd7475c4729fcf09308f17976dd2604f8a28dc86454037f68bc962
-
Filesize
18B
MD553f80324d70047eb6647d6505b658f23
SHA138a38589ab3e171c2ab18cad385f9b668358e7ec
SHA2563b3dc90d6399db741dccddc3099c9761dbd29160078d822fae3607612e27bac8
SHA512919b8afde1a1f627985d05ee55f63c06a4229ad3257ec06f1723c14bf04e4a30fe0b233a9d66cb05a36dda7a900a165ac086aa13e8b3a5ccf3c58033d2c12486