Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    16s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    01/09/2023, 19:13 UTC

General

  • Target

    drake speaks cayo perico.mp4

  • Size

    1.4MB

  • MD5

    af8e86342ee55b945ec4182f7e6f325f

  • SHA1

    b47b32baac56cd827d4d7b85e33c0229873c256d

  • SHA256

    a8c4d85e2fe586b100b12f351824299dd2925d1af3f18ecf7c4f7e7ed3f9ce4e

  • SHA512

    eca2265d36429228cba13a70069fe965f5c9496c7678a5e44ac6fedc9567b2fd0f6482fbddd2606b1474e0324e844044081b6a56a875fe644a213e140969e9ee

  • SSDEEP

    24576:RsSxf+QBCQtVFrhwhczVuQo+/iKVrpxHEuL3rsFL/16lKLP3MoLiLeRaU847PD:+Qfh8QtVJXtp/nA0y16lOPciEa7PD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 31 IoCs
  • Suspicious use of SendNotifyMessage 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\drake speaks cayo perico.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1692-5-0x000000013F430000-0x000000013F528000-memory.dmp

    Filesize

    992KB

  • memory/1692-6-0x000007FEFB6E0000-0x000007FEFB714000-memory.dmp

    Filesize

    208KB

  • memory/1692-7-0x000007FEF6670000-0x000007FEF6924000-memory.dmp

    Filesize

    2.7MB

  • memory/1692-9-0x000007FEFB6A0000-0x000007FEFB6B7000-memory.dmp

    Filesize

    92KB

  • memory/1692-10-0x000007FEF7F40000-0x000007FEF7F51000-memory.dmp

    Filesize

    68KB

  • memory/1692-11-0x000007FEF7E50000-0x000007FEF7E67000-memory.dmp

    Filesize

    92KB

  • memory/1692-8-0x000007FEFB6C0000-0x000007FEFB6D8000-memory.dmp

    Filesize

    96KB

  • memory/1692-12-0x000007FEF7E30000-0x000007FEF7E41000-memory.dmp

    Filesize

    68KB

  • memory/1692-13-0x000007FEF7E10000-0x000007FEF7E2D000-memory.dmp

    Filesize

    116KB

  • memory/1692-14-0x000007FEF7DD0000-0x000007FEF7DE1000-memory.dmp

    Filesize

    68KB

  • memory/1692-15-0x000007FEF6470000-0x000007FEF6670000-memory.dmp

    Filesize

    2.0MB

  • memory/1692-16-0x000007FEF5130000-0x000007FEF61DB000-memory.dmp

    Filesize

    16.7MB

  • memory/1692-17-0x000007FEF76A0000-0x000007FEF76DF000-memory.dmp

    Filesize

    252KB

  • memory/1692-18-0x000007FEF7DA0000-0x000007FEF7DC1000-memory.dmp

    Filesize

    132KB

  • memory/1692-19-0x000007FEF7BF0000-0x000007FEF7C08000-memory.dmp

    Filesize

    96KB

  • memory/1692-20-0x000007FEF7680000-0x000007FEF7691000-memory.dmp

    Filesize

    68KB

  • memory/1692-21-0x000007FEF7660000-0x000007FEF7671000-memory.dmp

    Filesize

    68KB

  • memory/1692-22-0x000007FEF7640000-0x000007FEF7651000-memory.dmp

    Filesize

    68KB

  • memory/1692-23-0x000007FEF70C0000-0x000007FEF70DB000-memory.dmp

    Filesize

    108KB

  • memory/1692-24-0x000007FEF70A0000-0x000007FEF70B1000-memory.dmp

    Filesize

    68KB

  • memory/1692-25-0x000007FEF7080000-0x000007FEF7098000-memory.dmp

    Filesize

    96KB

  • memory/1692-26-0x000007FEF7050000-0x000007FEF7080000-memory.dmp

    Filesize

    192KB

  • memory/1692-27-0x000007FEF6400000-0x000007FEF6467000-memory.dmp

    Filesize

    412KB

  • memory/1692-28-0x000007FEF6390000-0x000007FEF63FF000-memory.dmp

    Filesize

    444KB

  • memory/1692-29-0x000007FEF6BC0000-0x000007FEF6BD1000-memory.dmp

    Filesize

    68KB

  • memory/1692-30-0x000007FEF6330000-0x000007FEF6386000-memory.dmp

    Filesize

    344KB

  • memory/1692-31-0x000007FEF4FB0000-0x000007FEF5128000-memory.dmp

    Filesize

    1.5MB

  • memory/1692-32-0x000007FEF6310000-0x000007FEF6327000-memory.dmp

    Filesize

    92KB

  • memory/1692-33-0x000007FEF4E40000-0x000007FEF4FB0000-memory.dmp

    Filesize

    1.4MB

  • memory/1692-34-0x000007FEF62F0000-0x000007FEF6302000-memory.dmp

    Filesize

    72KB

  • memory/1692-35-0x000007FEF62A0000-0x000007FEF62E2000-memory.dmp

    Filesize

    264KB

  • memory/1692-36-0x000007FEF6250000-0x000007FEF629C000-memory.dmp

    Filesize

    304KB

  • memory/1692-37-0x000007FEF4CD0000-0x000007FEF4E3B000-memory.dmp

    Filesize

    1.4MB

  • memory/1692-38-0x000007FEF4C70000-0x000007FEF4CC7000-memory.dmp

    Filesize

    348KB

  • memory/1692-39-0x000007FEF4A20000-0x000007FEF4C6B000-memory.dmp

    Filesize

    2.3MB

  • memory/1692-40-0x000007FEF3270000-0x000007FEF4A20000-memory.dmp

    Filesize

    23.7MB

  • memory/1692-41-0x000007FEFBA90000-0x000007FEFBAA0000-memory.dmp

    Filesize

    64KB

  • memory/1692-42-0x000007FEF6220000-0x000007FEF624F000-memory.dmp

    Filesize

    188KB

  • memory/1692-43-0x000007FEF6200000-0x000007FEF6211000-memory.dmp

    Filesize

    68KB

  • memory/1692-44-0x000007FEF3220000-0x000007FEF3236000-memory.dmp

    Filesize

    88KB

  • memory/1692-45-0x000007FEF3150000-0x000007FEF3215000-memory.dmp

    Filesize

    788KB

  • memory/1692-46-0x000007FEF30D0000-0x000007FEF3145000-memory.dmp

    Filesize

    468KB

  • memory/1692-47-0x000007FEF3060000-0x000007FEF30C2000-memory.dmp

    Filesize

    392KB

  • memory/1692-48-0x000007FEF2FF0000-0x000007FEF305D000-memory.dmp

    Filesize

    436KB

  • memory/1692-49-0x000007FEF2FD0000-0x000007FEF2FE3000-memory.dmp

    Filesize

    76KB

  • memory/1692-50-0x000007FEF2FB0000-0x000007FEF2FC4000-memory.dmp

    Filesize

    80KB

  • memory/1692-51-0x000007FEF2F60000-0x000007FEF2FB0000-memory.dmp

    Filesize

    320KB

  • memory/1692-52-0x000007FEF2EA0000-0x000007FEF2F5D000-memory.dmp

    Filesize

    756KB

  • memory/1692-53-0x000007FEF2E70000-0x000007FEF2EA0000-memory.dmp

    Filesize

    192KB

  • memory/1692-54-0x000007FEF2C50000-0x000007FEF2E6D000-memory.dmp

    Filesize

    2.1MB

  • memory/1692-55-0x000007FEF2C30000-0x000007FEF2C45000-memory.dmp

    Filesize

    84KB

  • memory/1692-56-0x000007FEF2A70000-0x000007FEF2A81000-memory.dmp

    Filesize

    68KB

  • memory/1692-57-0x000007FEF2A50000-0x000007FEF2A62000-memory.dmp

    Filesize

    72KB

  • memory/1692-58-0x000007FEF28D0000-0x000007FEF2A4A000-memory.dmp

    Filesize

    1.5MB

  • memory/1692-59-0x000007FEF2C10000-0x000007FEF2C25000-memory.dmp

    Filesize

    84KB

  • memory/1692-60-0x000007FEF2BE0000-0x000007FEF2C03000-memory.dmp

    Filesize

    140KB

  • memory/1692-61-0x000007FEF2BC0000-0x000007FEF2BD3000-memory.dmp

    Filesize

    76KB

  • memory/1692-62-0x000007FEF2AC0000-0x000007FEF2BB4000-memory.dmp

    Filesize

    976KB

  • memory/1692-63-0x000007FEF2A90000-0x000007FEF2ABA000-memory.dmp

    Filesize

    168KB

  • memory/1692-65-0x000007FEF2890000-0x000007FEF28AB000-memory.dmp

    Filesize

    108KB

  • memory/1692-64-0x000007FEF28B0000-0x000007FEF28C3000-memory.dmp

    Filesize

    76KB

  • memory/1692-67-0x000007FEF2850000-0x000007FEF2865000-memory.dmp

    Filesize

    84KB

  • memory/1692-68-0x000007FEF2830000-0x000007FEF2843000-memory.dmp

    Filesize

    76KB

  • memory/1692-66-0x000007FEF2870000-0x000007FEF2882000-memory.dmp

    Filesize

    72KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.