Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    16s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    01/09/2023, 19:13

General

  • Target

    drake speaks cayo perico.mp4

  • Size

    1.4MB

  • MD5

    af8e86342ee55b945ec4182f7e6f325f

  • SHA1

    b47b32baac56cd827d4d7b85e33c0229873c256d

  • SHA256

    a8c4d85e2fe586b100b12f351824299dd2925d1af3f18ecf7c4f7e7ed3f9ce4e

  • SHA512

    eca2265d36429228cba13a70069fe965f5c9496c7678a5e44ac6fedc9567b2fd0f6482fbddd2606b1474e0324e844044081b6a56a875fe644a213e140969e9ee

  • SSDEEP

    24576:RsSxf+QBCQtVFrhwhczVuQo+/iKVrpxHEuL3rsFL/16lKLP3MoLiLeRaU847PD:+Qfh8QtVJXtp/nA0y16lOPciEa7PD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 31 IoCs
  • Suspicious use of SendNotifyMessage 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\drake speaks cayo perico.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1692-5-0x000000013F430000-0x000000013F528000-memory.dmp

    Filesize

    992KB

  • memory/1692-6-0x000007FEFB6E0000-0x000007FEFB714000-memory.dmp

    Filesize

    208KB

  • memory/1692-7-0x000007FEF6670000-0x000007FEF6924000-memory.dmp

    Filesize

    2.7MB

  • memory/1692-9-0x000007FEFB6A0000-0x000007FEFB6B7000-memory.dmp

    Filesize

    92KB

  • memory/1692-10-0x000007FEF7F40000-0x000007FEF7F51000-memory.dmp

    Filesize

    68KB

  • memory/1692-11-0x000007FEF7E50000-0x000007FEF7E67000-memory.dmp

    Filesize

    92KB

  • memory/1692-8-0x000007FEFB6C0000-0x000007FEFB6D8000-memory.dmp

    Filesize

    96KB

  • memory/1692-12-0x000007FEF7E30000-0x000007FEF7E41000-memory.dmp

    Filesize

    68KB

  • memory/1692-13-0x000007FEF7E10000-0x000007FEF7E2D000-memory.dmp

    Filesize

    116KB

  • memory/1692-14-0x000007FEF7DD0000-0x000007FEF7DE1000-memory.dmp

    Filesize

    68KB

  • memory/1692-15-0x000007FEF6470000-0x000007FEF6670000-memory.dmp

    Filesize

    2.0MB

  • memory/1692-16-0x000007FEF5130000-0x000007FEF61DB000-memory.dmp

    Filesize

    16.7MB

  • memory/1692-17-0x000007FEF76A0000-0x000007FEF76DF000-memory.dmp

    Filesize

    252KB

  • memory/1692-18-0x000007FEF7DA0000-0x000007FEF7DC1000-memory.dmp

    Filesize

    132KB

  • memory/1692-19-0x000007FEF7BF0000-0x000007FEF7C08000-memory.dmp

    Filesize

    96KB

  • memory/1692-20-0x000007FEF7680000-0x000007FEF7691000-memory.dmp

    Filesize

    68KB

  • memory/1692-21-0x000007FEF7660000-0x000007FEF7671000-memory.dmp

    Filesize

    68KB

  • memory/1692-22-0x000007FEF7640000-0x000007FEF7651000-memory.dmp

    Filesize

    68KB

  • memory/1692-23-0x000007FEF70C0000-0x000007FEF70DB000-memory.dmp

    Filesize

    108KB

  • memory/1692-24-0x000007FEF70A0000-0x000007FEF70B1000-memory.dmp

    Filesize

    68KB

  • memory/1692-25-0x000007FEF7080000-0x000007FEF7098000-memory.dmp

    Filesize

    96KB

  • memory/1692-26-0x000007FEF7050000-0x000007FEF7080000-memory.dmp

    Filesize

    192KB

  • memory/1692-27-0x000007FEF6400000-0x000007FEF6467000-memory.dmp

    Filesize

    412KB

  • memory/1692-28-0x000007FEF6390000-0x000007FEF63FF000-memory.dmp

    Filesize

    444KB

  • memory/1692-29-0x000007FEF6BC0000-0x000007FEF6BD1000-memory.dmp

    Filesize

    68KB

  • memory/1692-30-0x000007FEF6330000-0x000007FEF6386000-memory.dmp

    Filesize

    344KB

  • memory/1692-31-0x000007FEF4FB0000-0x000007FEF5128000-memory.dmp

    Filesize

    1.5MB

  • memory/1692-32-0x000007FEF6310000-0x000007FEF6327000-memory.dmp

    Filesize

    92KB

  • memory/1692-33-0x000007FEF4E40000-0x000007FEF4FB0000-memory.dmp

    Filesize

    1.4MB

  • memory/1692-34-0x000007FEF62F0000-0x000007FEF6302000-memory.dmp

    Filesize

    72KB

  • memory/1692-35-0x000007FEF62A0000-0x000007FEF62E2000-memory.dmp

    Filesize

    264KB

  • memory/1692-36-0x000007FEF6250000-0x000007FEF629C000-memory.dmp

    Filesize

    304KB

  • memory/1692-37-0x000007FEF4CD0000-0x000007FEF4E3B000-memory.dmp

    Filesize

    1.4MB

  • memory/1692-38-0x000007FEF4C70000-0x000007FEF4CC7000-memory.dmp

    Filesize

    348KB

  • memory/1692-39-0x000007FEF4A20000-0x000007FEF4C6B000-memory.dmp

    Filesize

    2.3MB

  • memory/1692-40-0x000007FEF3270000-0x000007FEF4A20000-memory.dmp

    Filesize

    23.7MB

  • memory/1692-41-0x000007FEFBA90000-0x000007FEFBAA0000-memory.dmp

    Filesize

    64KB

  • memory/1692-42-0x000007FEF6220000-0x000007FEF624F000-memory.dmp

    Filesize

    188KB

  • memory/1692-43-0x000007FEF6200000-0x000007FEF6211000-memory.dmp

    Filesize

    68KB

  • memory/1692-44-0x000007FEF3220000-0x000007FEF3236000-memory.dmp

    Filesize

    88KB

  • memory/1692-45-0x000007FEF3150000-0x000007FEF3215000-memory.dmp

    Filesize

    788KB

  • memory/1692-46-0x000007FEF30D0000-0x000007FEF3145000-memory.dmp

    Filesize

    468KB

  • memory/1692-47-0x000007FEF3060000-0x000007FEF30C2000-memory.dmp

    Filesize

    392KB

  • memory/1692-48-0x000007FEF2FF0000-0x000007FEF305D000-memory.dmp

    Filesize

    436KB

  • memory/1692-49-0x000007FEF2FD0000-0x000007FEF2FE3000-memory.dmp

    Filesize

    76KB

  • memory/1692-50-0x000007FEF2FB0000-0x000007FEF2FC4000-memory.dmp

    Filesize

    80KB

  • memory/1692-51-0x000007FEF2F60000-0x000007FEF2FB0000-memory.dmp

    Filesize

    320KB

  • memory/1692-52-0x000007FEF2EA0000-0x000007FEF2F5D000-memory.dmp

    Filesize

    756KB

  • memory/1692-53-0x000007FEF2E70000-0x000007FEF2EA0000-memory.dmp

    Filesize

    192KB

  • memory/1692-54-0x000007FEF2C50000-0x000007FEF2E6D000-memory.dmp

    Filesize

    2.1MB

  • memory/1692-55-0x000007FEF2C30000-0x000007FEF2C45000-memory.dmp

    Filesize

    84KB

  • memory/1692-56-0x000007FEF2A70000-0x000007FEF2A81000-memory.dmp

    Filesize

    68KB

  • memory/1692-57-0x000007FEF2A50000-0x000007FEF2A62000-memory.dmp

    Filesize

    72KB

  • memory/1692-58-0x000007FEF28D0000-0x000007FEF2A4A000-memory.dmp

    Filesize

    1.5MB

  • memory/1692-59-0x000007FEF2C10000-0x000007FEF2C25000-memory.dmp

    Filesize

    84KB

  • memory/1692-60-0x000007FEF2BE0000-0x000007FEF2C03000-memory.dmp

    Filesize

    140KB

  • memory/1692-61-0x000007FEF2BC0000-0x000007FEF2BD3000-memory.dmp

    Filesize

    76KB

  • memory/1692-62-0x000007FEF2AC0000-0x000007FEF2BB4000-memory.dmp

    Filesize

    976KB

  • memory/1692-63-0x000007FEF2A90000-0x000007FEF2ABA000-memory.dmp

    Filesize

    168KB

  • memory/1692-65-0x000007FEF2890000-0x000007FEF28AB000-memory.dmp

    Filesize

    108KB

  • memory/1692-64-0x000007FEF28B0000-0x000007FEF28C3000-memory.dmp

    Filesize

    76KB

  • memory/1692-67-0x000007FEF2850000-0x000007FEF2865000-memory.dmp

    Filesize

    84KB

  • memory/1692-68-0x000007FEF2830000-0x000007FEF2843000-memory.dmp

    Filesize

    76KB

  • memory/1692-66-0x000007FEF2870000-0x000007FEF2882000-memory.dmp

    Filesize

    72KB