Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2023, 20:33

General

  • Target

    DF CONNECTED v2.7.6c (Windows)/Windows Ding.ogg

  • Size

    15KB

  • MD5

    b3a2a47da63221713aed0d07e69707be

  • SHA1

    a2116f0b38b04d81b05679ff38df71af531f2be6

  • SHA256

    45d9ba7d423fb42b2a5d7322a6f64daac2732299f3f3fc00bd08c779957bbe5c

  • SHA512

    163b71b18582c4471f54346725a7b91601d69c40424121aacebfce2179ef281cf4d95286348c2461025a33838a02233e437b0838af3908ce9e77cca53f2d8a11

  • SSDEEP

    192:tTDJo+OFStqq3gFdGClJ3wH8AWfU4kzQ/iV/sP5RpsRzL6AMrx6pFfIafvC8iYI9:tni+OoVe5E8ls1Wps5Ax6XgaHhtZS8G3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\DF CONNECTED v2.7.6c (Windows)\Windows Ding.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2928-0-0x000000013FF00000-0x000000013FFF8000-memory.dmp

    Filesize

    992KB

  • memory/2928-1-0x000007FEF8470000-0x000007FEF84A4000-memory.dmp

    Filesize

    208KB

  • memory/2928-2-0x000007FEF6070000-0x000007FEF6324000-memory.dmp

    Filesize

    2.7MB

  • memory/2928-3-0x000007FEFB880000-0x000007FEFB898000-memory.dmp

    Filesize

    96KB

  • memory/2928-4-0x000007FEF84F0000-0x000007FEF8507000-memory.dmp

    Filesize

    92KB

  • memory/2928-5-0x000007FEF8410000-0x000007FEF8421000-memory.dmp

    Filesize

    68KB

  • memory/2928-6-0x000007FEF7490000-0x000007FEF74A7000-memory.dmp

    Filesize

    92KB

  • memory/2928-7-0x000007FEF7470000-0x000007FEF7481000-memory.dmp

    Filesize

    68KB

  • memory/2928-8-0x000007FEF7450000-0x000007FEF746D000-memory.dmp

    Filesize

    116KB

  • memory/2928-9-0x000007FEF6750000-0x000007FEF6761000-memory.dmp

    Filesize

    68KB

  • memory/2928-10-0x000007FEF4FC0000-0x000007FEF606B000-memory.dmp

    Filesize

    16.7MB

  • memory/2928-18-0x000007FEF6070000-0x000007FEF6324000-memory.dmp

    Filesize

    2.7MB

  • memory/2928-26-0x000007FEF4FC0000-0x000007FEF606B000-memory.dmp

    Filesize

    16.7MB

  • memory/2928-27-0x000007FEF4DC0000-0x000007FEF4FC0000-memory.dmp

    Filesize

    2.0MB

  • memory/2928-28-0x000007FEF6710000-0x000007FEF674F000-memory.dmp

    Filesize

    252KB

  • memory/2928-29-0x000007FEF66E0000-0x000007FEF6701000-memory.dmp

    Filesize

    132KB

  • memory/2928-30-0x000007FEF66C0000-0x000007FEF66D8000-memory.dmp

    Filesize

    96KB

  • memory/2928-31-0x000007FEF66A0000-0x000007FEF66B1000-memory.dmp

    Filesize

    68KB

  • memory/2928-32-0x000007FEF4DA0000-0x000007FEF4DB1000-memory.dmp

    Filesize

    68KB

  • memory/2928-33-0x000007FEF4D80000-0x000007FEF4D91000-memory.dmp

    Filesize

    68KB

  • memory/2928-34-0x000007FEF4D60000-0x000007FEF4D7B000-memory.dmp

    Filesize

    108KB

  • memory/2928-35-0x000007FEF4D40000-0x000007FEF4D51000-memory.dmp

    Filesize

    68KB

  • memory/2928-36-0x000007FEF4D20000-0x000007FEF4D38000-memory.dmp

    Filesize

    96KB

  • memory/2928-37-0x000007FEF4CF0000-0x000007FEF4D20000-memory.dmp

    Filesize

    192KB

  • memory/2928-38-0x000007FEF4C80000-0x000007FEF4CE7000-memory.dmp

    Filesize

    412KB

  • memory/2928-39-0x000007FEF4C10000-0x000007FEF4C7F000-memory.dmp

    Filesize

    444KB

  • memory/2928-40-0x000007FEF4BF0000-0x000007FEF4C01000-memory.dmp

    Filesize

    68KB

  • memory/2928-41-0x000007FEF4B90000-0x000007FEF4BEC000-memory.dmp

    Filesize

    368KB

  • memory/2928-42-0x000007FEF4A10000-0x000007FEF4B88000-memory.dmp

    Filesize

    1.5MB

  • memory/2928-43-0x000007FEF49F0000-0x000007FEF4A07000-memory.dmp

    Filesize

    92KB

  • memory/2928-44-0x000007FEFB500000-0x000007FEFB510000-memory.dmp

    Filesize

    64KB

  • memory/2928-45-0x000007FEF49C0000-0x000007FEF49EF000-memory.dmp

    Filesize

    188KB

  • memory/2928-46-0x000007FEF49A0000-0x000007FEF49B1000-memory.dmp

    Filesize

    68KB

  • memory/2928-47-0x000007FEF4980000-0x000007FEF4996000-memory.dmp

    Filesize

    88KB

  • memory/2928-48-0x000007FEF48B0000-0x000007FEF4975000-memory.dmp

    Filesize

    788KB

  • memory/2928-49-0x000007FEF4890000-0x000007FEF48A5000-memory.dmp

    Filesize

    84KB

  • memory/2928-50-0x000007FEF4850000-0x000007FEF4861000-memory.dmp

    Filesize

    68KB

  • memory/2928-51-0x000007FEF4830000-0x000007FEF4842000-memory.dmp

    Filesize

    72KB

  • memory/2928-52-0x000007FEF46B0000-0x000007FEF482A000-memory.dmp

    Filesize

    1.5MB