Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    02/09/2023, 05:44

General

  • Target

    1min_2.mp3

  • Size

    1.5MB

  • MD5

    4fe6ab084e5a735e0dcb7f7be3e5532b

  • SHA1

    1909d72c91638561aa3d3fbf7b5f22272c51095c

  • SHA256

    30ccda753fe39cc8c99cfaef948869f47f0251daf6d1180fbb717a3e6e26b8bf

  • SHA512

    48f08183b19c0b4eb343b120d00f61a04ba2f2c7bc0630bb6b3e6c925412d923e21ed2a878006e3d89261a7222e11b92a3c282ffbcf6c582031861220ca59b2f

  • SSDEEP

    49152:LF6bphlsCYe7btVmVi/IYdmOQ3GJvNWtdoH:Lc7XYUbXiiQ6A3q1YmH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\1min_2.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2148-5-0x000000013FCF0000-0x000000013FDE8000-memory.dmp

    Filesize

    992KB

  • memory/2148-6-0x000007FEF7B40000-0x000007FEF7B74000-memory.dmp

    Filesize

    208KB

  • memory/2148-7-0x000007FEF5EE0000-0x000007FEF6194000-memory.dmp

    Filesize

    2.7MB

  • memory/2148-8-0x000007FEFBD80000-0x000007FEFBD98000-memory.dmp

    Filesize

    96KB

  • memory/2148-12-0x000007FEF7AE0000-0x000007FEF7AF1000-memory.dmp

    Filesize

    68KB

  • memory/2148-11-0x000007FEF7B00000-0x000007FEF7B17000-memory.dmp

    Filesize

    92KB

  • memory/2148-13-0x000007FEF7970000-0x000007FEF798D000-memory.dmp

    Filesize

    116KB

  • memory/2148-14-0x000007FEF7950000-0x000007FEF7961000-memory.dmp

    Filesize

    68KB

  • memory/2148-10-0x000007FEF7B20000-0x000007FEF7B31000-memory.dmp

    Filesize

    68KB

  • memory/2148-9-0x000007FEF7BC0000-0x000007FEF7BD7000-memory.dmp

    Filesize

    92KB

  • memory/2148-15-0x000007FEF4E30000-0x000007FEF5EDB000-memory.dmp

    Filesize

    16.7MB

  • memory/2148-16-0x000007FEF4C30000-0x000007FEF4E30000-memory.dmp

    Filesize

    2.0MB

  • memory/2148-17-0x000007FEF6C90000-0x000007FEF6CCF000-memory.dmp

    Filesize

    252KB

  • memory/2148-19-0x000007FEF7650000-0x000007FEF7668000-memory.dmp

    Filesize

    96KB

  • memory/2148-18-0x000007FEF6C60000-0x000007FEF6C81000-memory.dmp

    Filesize

    132KB

  • memory/2148-21-0x000007FEF66E0000-0x000007FEF66F1000-memory.dmp

    Filesize

    68KB

  • memory/2148-20-0x000007FEF6C40000-0x000007FEF6C51000-memory.dmp

    Filesize

    68KB

  • memory/2148-23-0x000007FEF66A0000-0x000007FEF66BB000-memory.dmp

    Filesize

    108KB

  • memory/2148-22-0x000007FEF66C0000-0x000007FEF66D1000-memory.dmp

    Filesize

    68KB

  • memory/2148-24-0x000007FEF6600000-0x000007FEF6611000-memory.dmp

    Filesize

    68KB

  • memory/2148-26-0x000007FEF65B0000-0x000007FEF65E0000-memory.dmp

    Filesize

    192KB

  • memory/2148-25-0x000007FEF65E0000-0x000007FEF65F8000-memory.dmp

    Filesize

    96KB

  • memory/2148-27-0x000007FEF6540000-0x000007FEF65A7000-memory.dmp

    Filesize

    412KB

  • memory/2148-28-0x000007FEF4BC0000-0x000007FEF4C2F000-memory.dmp

    Filesize

    444KB

  • memory/2148-32-0x000007FEF4B20000-0x000007FEF4B77000-memory.dmp

    Filesize

    348KB

  • memory/2148-31-0x000007FEF4B80000-0x000007FEF4B91000-memory.dmp

    Filesize

    68KB

  • memory/2148-30-0x000007FEF4BA0000-0x000007FEF4BB7000-memory.dmp

    Filesize

    92KB

  • memory/2148-29-0x000007FEF6520000-0x000007FEF6531000-memory.dmp

    Filesize

    68KB

  • memory/2148-33-0x000007FEF4AF0000-0x000007FEF4B1F000-memory.dmp

    Filesize

    188KB

  • memory/2148-34-0x000007FEF4AD0000-0x000007FEF4AE3000-memory.dmp

    Filesize

    76KB

  • memory/2148-35-0x000007FEF4AB0000-0x000007FEF4AC1000-memory.dmp

    Filesize

    68KB

  • memory/2148-37-0x000007FEF49C0000-0x000007FEF49D2000-memory.dmp

    Filesize

    72KB

  • memory/2148-36-0x000007FEF49E0000-0x000007FEF4AA5000-memory.dmp

    Filesize

    788KB

  • memory/2148-38-0x000007FEF49A0000-0x000007FEF49B1000-memory.dmp

    Filesize

    68KB

  • memory/2148-39-0x000007FEF4980000-0x000007FEF4994000-memory.dmp

    Filesize

    80KB

  • memory/2148-40-0x000007FEF4960000-0x000007FEF4972000-memory.dmp

    Filesize

    72KB

  • memory/2148-41-0x000007FEF4940000-0x000007FEF4954000-memory.dmp

    Filesize

    80KB

  • memory/2148-42-0x000007FEF4920000-0x000007FEF493E000-memory.dmp

    Filesize

    120KB

  • memory/2148-44-0x000007FEF48E0000-0x000007FEF48F5000-memory.dmp

    Filesize

    84KB

  • memory/2148-46-0x000007FEF4890000-0x000007FEF48BC000-memory.dmp

    Filesize

    176KB

  • memory/2148-48-0x000007FEF4840000-0x000007FEF4870000-memory.dmp

    Filesize

    192KB

  • memory/2148-49-0x000007FEF4820000-0x000007FEF4837000-memory.dmp

    Filesize

    92KB

  • memory/2148-47-0x000007FEF4870000-0x000007FEF4882000-memory.dmp

    Filesize

    72KB

  • memory/2148-45-0x000007FEF48C0000-0x000007FEF48D4000-memory.dmp

    Filesize

    80KB

  • memory/2148-43-0x000007FEF4900000-0x000007FEF4916000-memory.dmp

    Filesize

    88KB

  • memory/2148-50-0x000007FEF3070000-0x000007FEF4820000-memory.dmp

    Filesize

    23.7MB

  • memory/2148-51-0x000007FEF3050000-0x000007FEF3061000-memory.dmp

    Filesize

    68KB

  • memory/2148-52-0x000007FEF3030000-0x000007FEF3042000-memory.dmp

    Filesize

    72KB

  • memory/2148-53-0x000007FEF2EB0000-0x000007FEF3028000-memory.dmp

    Filesize

    1.5MB

  • memory/2148-54-0x000007FEF2E90000-0x000007FEF2EA7000-memory.dmp

    Filesize

    92KB

  • memory/2148-55-0x000007FEF2E30000-0x000007FEF2E86000-memory.dmp

    Filesize

    344KB

  • memory/2148-56-0x000007FEF2E00000-0x000007FEF2E28000-memory.dmp

    Filesize

    160KB

  • memory/2148-58-0x000007FEFB7D0000-0x000007FEFB7E0000-memory.dmp

    Filesize

    64KB

  • memory/2148-59-0x000007FEF2DB0000-0x000007FEF2DC6000-memory.dmp

    Filesize

    88KB

  • memory/2148-60-0x000007FEF2D30000-0x000007FEF2DA5000-memory.dmp

    Filesize

    468KB

  • memory/2148-57-0x000007FEF2DD0000-0x000007FEF2DF4000-memory.dmp

    Filesize

    144KB

  • memory/2148-61-0x000007FEF2CC0000-0x000007FEF2D22000-memory.dmp

    Filesize

    392KB

  • memory/2148-62-0x000007FEF2C50000-0x000007FEF2CBD000-memory.dmp

    Filesize

    436KB

  • memory/2148-63-0x000007FEF2C30000-0x000007FEF2C45000-memory.dmp

    Filesize

    84KB

  • memory/2148-64-0x000007FEF2BF0000-0x000007FEF2C01000-memory.dmp

    Filesize

    68KB

  • memory/2148-65-0x000007FEF2BD0000-0x000007FEF2BE2000-memory.dmp

    Filesize

    72KB

  • memory/2148-66-0x000007FEF2A50000-0x000007FEF2BCA000-memory.dmp

    Filesize

    1.5MB