Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    25s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2023, 20:33 UTC

General

  • Target

    DF CONNECTED v2.7.6c (Windows)/mus_bullethell.ogg

  • Size

    887KB

  • MD5

    0bb3809e1847d59714bac20b3e0176cf

  • SHA1

    324fb3a4b99d17931502f1a1eb7a46ad6fe8d103

  • SHA256

    3d32cffaa1a04557763b3e53a5bdfe194af3883cfb97793e250067cffd33b193

  • SHA512

    5dfc7be4f8f533fb4d38786cdaa32e8331cfb1bb19e2e620a1e0a9725e56628e9857682e3acfc6237b9ba6d4efa95bbb97fc84efac231d2f8a095c2895757d04

  • SSDEEP

    24576:YedkPGmcTBSNYTa2ihtSiPHURl97vXKdLHQMX:YP3cTyYzAfHUVDmQMX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\DF CONNECTED v2.7.6c (Windows)\mus_bullethell.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2288-5-0x000000013F6F0000-0x000000013F7E8000-memory.dmp

    Filesize

    992KB

  • memory/2288-6-0x000007FEFAD80000-0x000007FEFADB4000-memory.dmp

    Filesize

    208KB

  • memory/2288-7-0x000007FEF5B70000-0x000007FEF5E24000-memory.dmp

    Filesize

    2.7MB

  • memory/2288-8-0x000007FEFB200000-0x000007FEFB218000-memory.dmp

    Filesize

    96KB

  • memory/2288-10-0x000007FEFAD40000-0x000007FEFAD51000-memory.dmp

    Filesize

    68KB

  • memory/2288-9-0x000007FEFAD60000-0x000007FEFAD77000-memory.dmp

    Filesize

    92KB

  • memory/2288-14-0x000007FEF7420000-0x000007FEF7431000-memory.dmp

    Filesize

    68KB

  • memory/2288-13-0x000007FEF7440000-0x000007FEF745D000-memory.dmp

    Filesize

    116KB

  • memory/2288-12-0x000007FEF7490000-0x000007FEF74A1000-memory.dmp

    Filesize

    68KB

  • memory/2288-11-0x000007FEF74B0000-0x000007FEF74C7000-memory.dmp

    Filesize

    92KB

  • memory/2288-15-0x000007FEF5970000-0x000007FEF5B70000-memory.dmp

    Filesize

    2.0MB

  • memory/2288-16-0x000007FEF48C0000-0x000007FEF596B000-memory.dmp

    Filesize

    16.7MB

  • memory/2288-17-0x000007FEF72E0000-0x000007FEF731F000-memory.dmp

    Filesize

    252KB

  • memory/2288-18-0x000007FEF72B0000-0x000007FEF72D1000-memory.dmp

    Filesize

    132KB

  • memory/2288-27-0x000007FEF61B0000-0x000007FEF6217000-memory.dmp

    Filesize

    412KB

  • memory/2288-26-0x000007FEF6220000-0x000007FEF6250000-memory.dmp

    Filesize

    192KB

  • memory/2288-25-0x000007FEF6250000-0x000007FEF6268000-memory.dmp

    Filesize

    96KB

  • memory/2288-24-0x000007FEF6270000-0x000007FEF6281000-memory.dmp

    Filesize

    68KB

  • memory/2288-23-0x000007FEF6290000-0x000007FEF62AB000-memory.dmp

    Filesize

    108KB

  • memory/2288-22-0x000007FEF6710000-0x000007FEF6721000-memory.dmp

    Filesize

    68KB

  • memory/2288-21-0x000007FEF6730000-0x000007FEF6741000-memory.dmp

    Filesize

    68KB

  • memory/2288-20-0x000007FEF6750000-0x000007FEF6761000-memory.dmp

    Filesize

    68KB

  • memory/2288-19-0x000007FEF6770000-0x000007FEF6788000-memory.dmp

    Filesize

    96KB

  • memory/2288-30-0x000007FEF47D0000-0x000007FEF482C000-memory.dmp

    Filesize

    368KB

  • memory/2288-29-0x000007FEF4830000-0x000007FEF4841000-memory.dmp

    Filesize

    68KB

  • memory/2288-28-0x000007FEF4850000-0x000007FEF48BF000-memory.dmp

    Filesize

    444KB

  • memory/2288-32-0x000007FEF4630000-0x000007FEF4647000-memory.dmp

    Filesize

    92KB

  • memory/2288-33-0x000007FEFB130000-0x000007FEFB140000-memory.dmp

    Filesize

    64KB

  • memory/2288-31-0x000007FEF4650000-0x000007FEF47C8000-memory.dmp

    Filesize

    1.5MB

  • memory/2288-35-0x000007FEF45E0000-0x000007FEF45F1000-memory.dmp

    Filesize

    68KB

  • memory/2288-36-0x000007FEF45C0000-0x000007FEF45D6000-memory.dmp

    Filesize

    88KB

  • memory/2288-34-0x000007FEF4600000-0x000007FEF462F000-memory.dmp

    Filesize

    188KB

  • memory/2288-38-0x000007FEF44D0000-0x000007FEF44E5000-memory.dmp

    Filesize

    84KB

  • memory/2288-37-0x000007FEF44F0000-0x000007FEF45B5000-memory.dmp

    Filesize

    788KB

  • memory/2288-39-0x000007FEF4490000-0x000007FEF44A1000-memory.dmp

    Filesize

    68KB

  • memory/2288-40-0x000007FEF4470000-0x000007FEF4482000-memory.dmp

    Filesize

    72KB

  • memory/2288-41-0x000007FEF42F0000-0x000007FEF446A000-memory.dmp

    Filesize

    1.5MB

  • memory/2288-44-0x000007FEF5B70000-0x000007FEF5E24000-memory.dmp

    Filesize

    2.7MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.