Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2023, 20:33

General

  • Target

    DF CONNECTED v2.7.6c (Windows)/mus_encore.ogg

  • Size

    1.1MB

  • MD5

    a76745c7e4b89562b3445776ef480b40

  • SHA1

    2a968e4c3e7ceef04960b312425ea9be54df48bc

  • SHA256

    db99e5386186dff5baba8d8fa5be354ee03636039c849bb9c91eafc812029f61

  • SHA512

    c8ecb22423313fbde5adc279da38f8210dc68a6166ace954f36e3450a987ac474a731dcc52f2cc6c5f897fb4ca933ef46bc4545362077ab45e8d139e71b43e9d

  • SSDEEP

    24576:FJUAzTbb2yQQxZ7Xrcxo0AYNVGjny1BTuzUMHmeGmZHJPPzoO:/Ux47b/YSTUBizUkGmZpHzJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\DF CONNECTED v2.7.6c (Windows)\mus_encore.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2208-5-0x000000013F9E0000-0x000000013FAD8000-memory.dmp

    Filesize

    992KB

  • memory/2208-6-0x000007FEF7540000-0x000007FEF7574000-memory.dmp

    Filesize

    208KB

  • memory/2208-7-0x000007FEF5B70000-0x000007FEF5E24000-memory.dmp

    Filesize

    2.7MB

  • memory/2208-8-0x000007FEFB680000-0x000007FEFB698000-memory.dmp

    Filesize

    96KB

  • memory/2208-10-0x000007FEF7520000-0x000007FEF7531000-memory.dmp

    Filesize

    68KB

  • memory/2208-9-0x000007FEF75A0000-0x000007FEF75B7000-memory.dmp

    Filesize

    92KB

  • memory/2208-11-0x000007FEF7200000-0x000007FEF7217000-memory.dmp

    Filesize

    92KB

  • memory/2208-14-0x000007FEF6800000-0x000007FEF6811000-memory.dmp

    Filesize

    68KB

  • memory/2208-13-0x000007FEF6820000-0x000007FEF683D000-memory.dmp

    Filesize

    116KB

  • memory/2208-12-0x000007FEF6840000-0x000007FEF6851000-memory.dmp

    Filesize

    68KB

  • memory/2208-15-0x000007FEF4AC0000-0x000007FEF5B6B000-memory.dmp

    Filesize

    16.7MB

  • memory/2208-16-0x000007FEF48C0000-0x000007FEF4AC0000-memory.dmp

    Filesize

    2.0MB

  • memory/2208-24-0x000007FEF61A0000-0x000007FEF61B1000-memory.dmp

    Filesize

    68KB

  • memory/2208-36-0x000007FEF4500000-0x000007FEF4516000-memory.dmp

    Filesize

    88KB

  • memory/2208-35-0x000007FEF4520000-0x000007FEF4531000-memory.dmp

    Filesize

    68KB

  • memory/2208-34-0x000007FEF4540000-0x000007FEF456F000-memory.dmp

    Filesize

    188KB

  • memory/2208-33-0x000007FEF7600000-0x000007FEF7610000-memory.dmp

    Filesize

    64KB

  • memory/2208-32-0x000007FEF4570000-0x000007FEF4587000-memory.dmp

    Filesize

    92KB

  • memory/2208-31-0x000007FEF4590000-0x000007FEF4708000-memory.dmp

    Filesize

    1.5MB

  • memory/2208-30-0x000007FEF4710000-0x000007FEF476C000-memory.dmp

    Filesize

    368KB

  • memory/2208-29-0x000007FEF4770000-0x000007FEF4781000-memory.dmp

    Filesize

    68KB

  • memory/2208-28-0x000007FEF4790000-0x000007FEF47FF000-memory.dmp

    Filesize

    444KB

  • memory/2208-27-0x000007FEF4800000-0x000007FEF4867000-memory.dmp

    Filesize

    412KB

  • memory/2208-26-0x000007FEF4870000-0x000007FEF48A0000-memory.dmp

    Filesize

    192KB

  • memory/2208-25-0x000007FEF48A0000-0x000007FEF48B8000-memory.dmp

    Filesize

    96KB

  • memory/2208-23-0x000007FEF61C0000-0x000007FEF61DB000-memory.dmp

    Filesize

    108KB

  • memory/2208-22-0x000007FEF61E0000-0x000007FEF61F1000-memory.dmp

    Filesize

    68KB

  • memory/2208-21-0x000007FEF6200000-0x000007FEF6211000-memory.dmp

    Filesize

    68KB

  • memory/2208-20-0x000007FEF6220000-0x000007FEF6231000-memory.dmp

    Filesize

    68KB

  • memory/2208-19-0x000007FEF6320000-0x000007FEF6338000-memory.dmp

    Filesize

    96KB

  • memory/2208-18-0x000007FEF6240000-0x000007FEF6261000-memory.dmp

    Filesize

    132KB

  • memory/2208-17-0x000007FEF6270000-0x000007FEF62AF000-memory.dmp

    Filesize

    252KB

  • memory/2208-37-0x000007FEF4430000-0x000007FEF44F5000-memory.dmp

    Filesize

    788KB

  • memory/2208-39-0x000007FEF43F0000-0x000007FEF4401000-memory.dmp

    Filesize

    68KB

  • memory/2208-38-0x000007FEF4410000-0x000007FEF4425000-memory.dmp

    Filesize

    84KB

  • memory/2208-40-0x000007FEF43B0000-0x000007FEF43C2000-memory.dmp

    Filesize

    72KB

  • memory/2208-41-0x000007FEF4230000-0x000007FEF43AA000-memory.dmp

    Filesize

    1.5MB