Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2023, 20:33

General

  • Target

    DF CONNECTED v2.7.6c (Windows)/mus_encore_intro.ogg

  • Size

    360KB

  • MD5

    8680f2baf73990f1da6b81675672a295

  • SHA1

    0ca4bf56c4967c919ef7450ccbbfa6ecbcb3cff4

  • SHA256

    f0ad0d504b14743e66becc2499de561a06b3aed62b3c20c9f9ab2b046e6013fd

  • SHA512

    91565dbe38828fa6ca108f092e35854adc66bbec8b2e6bdd8f5d2430fff3aff8eaa082346f04d9de31a9ab6f6f1d0fd1f3c491d48f390362625ba6e8fdde28d5

  • SSDEEP

    6144:LlQgsdLaKqjwe4koDKRy8pM3o2iK8PGwrB6eFgBfX8sS5pm9Cu6:1sdLaLjwerQ6ywMpiNPGwWfX39U

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\DF CONNECTED v2.7.6c (Windows)\mus_encore_intro.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2448-5-0x000000013FF30000-0x0000000140028000-memory.dmp

    Filesize

    992KB

  • memory/2448-6-0x000007FEFACB0000-0x000007FEFACE4000-memory.dmp

    Filesize

    208KB

  • memory/2448-7-0x000007FEF5E80000-0x000007FEF6134000-memory.dmp

    Filesize

    2.7MB

  • memory/2448-8-0x000007FEFB620000-0x000007FEFB638000-memory.dmp

    Filesize

    96KB

  • memory/2448-10-0x000007FEFAC90000-0x000007FEFACA1000-memory.dmp

    Filesize

    68KB

  • memory/2448-9-0x000007FEFB040000-0x000007FEFB057000-memory.dmp

    Filesize

    92KB

  • memory/2448-11-0x000007FEFAC70000-0x000007FEFAC87000-memory.dmp

    Filesize

    92KB

  • memory/2448-12-0x000007FEF7710000-0x000007FEF7721000-memory.dmp

    Filesize

    68KB

  • memory/2448-13-0x000007FEF7670000-0x000007FEF768D000-memory.dmp

    Filesize

    116KB

  • memory/2448-14-0x000007FEF7650000-0x000007FEF7661000-memory.dmp

    Filesize

    68KB

  • memory/2448-15-0x000007FEF5C80000-0x000007FEF5E80000-memory.dmp

    Filesize

    2.0MB

  • memory/2448-16-0x000007FEF7610000-0x000007FEF764F000-memory.dmp

    Filesize

    252KB

  • memory/2448-17-0x000007FEF4BD0000-0x000007FEF5C7B000-memory.dmp

    Filesize

    16.7MB

  • memory/2448-19-0x000007FEF75C0000-0x000007FEF75D8000-memory.dmp

    Filesize

    96KB

  • memory/2448-20-0x000007FEF7070000-0x000007FEF7081000-memory.dmp

    Filesize

    68KB

  • memory/2448-23-0x000007FEF6A90000-0x000007FEF6AAB000-memory.dmp

    Filesize

    108KB

  • memory/2448-24-0x000007FEF6A70000-0x000007FEF6A81000-memory.dmp

    Filesize

    68KB

  • memory/2448-26-0x000007FEF6A20000-0x000007FEF6A50000-memory.dmp

    Filesize

    192KB

  • memory/2448-27-0x000007FEF6550000-0x000007FEF65B7000-memory.dmp

    Filesize

    412KB

  • memory/2448-29-0x000007FEF64C0000-0x000007FEF64D1000-memory.dmp

    Filesize

    68KB

  • memory/2448-28-0x000007FEF64E0000-0x000007FEF654F000-memory.dmp

    Filesize

    444KB

  • memory/2448-25-0x000007FEF6A50000-0x000007FEF6A68000-memory.dmp

    Filesize

    96KB

  • memory/2448-30-0x000007FEF4B70000-0x000007FEF4BCC000-memory.dmp

    Filesize

    368KB

  • memory/2448-22-0x000007FEF6FE0000-0x000007FEF6FF1000-memory.dmp

    Filesize

    68KB

  • memory/2448-21-0x000007FEF7000000-0x000007FEF7011000-memory.dmp

    Filesize

    68KB

  • memory/2448-18-0x000007FEF75E0000-0x000007FEF7601000-memory.dmp

    Filesize

    132KB

  • memory/2448-31-0x000007FEF49F0000-0x000007FEF4B68000-memory.dmp

    Filesize

    1.5MB

  • memory/2448-32-0x000007FEF49D0000-0x000007FEF49E7000-memory.dmp

    Filesize

    92KB

  • memory/2448-33-0x000007FEFB030000-0x000007FEFB040000-memory.dmp

    Filesize

    64KB

  • memory/2448-35-0x000007FEF4980000-0x000007FEF4991000-memory.dmp

    Filesize

    68KB

  • memory/2448-36-0x000007FEF4960000-0x000007FEF4976000-memory.dmp

    Filesize

    88KB

  • memory/2448-34-0x000007FEF49A0000-0x000007FEF49CF000-memory.dmp

    Filesize

    188KB

  • memory/2448-37-0x000007FEF4890000-0x000007FEF4955000-memory.dmp

    Filesize

    788KB

  • memory/2448-39-0x000007FEF4830000-0x000007FEF4841000-memory.dmp

    Filesize

    68KB

  • memory/2448-40-0x000007FEF4810000-0x000007FEF4822000-memory.dmp

    Filesize

    72KB

  • memory/2448-38-0x000007FEF4870000-0x000007FEF4885000-memory.dmp

    Filesize

    84KB

  • memory/2448-41-0x000007FEF4690000-0x000007FEF480A000-memory.dmp

    Filesize

    1.5MB

  • memory/2448-54-0x000007FEF4BD0000-0x000007FEF5C7B000-memory.dmp

    Filesize

    16.7MB