Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2023, 07:18

General

  • Target

    shoot.ogg

  • Size

    43KB

  • MD5

    ef629770d6b4871e9bb640d164cb201d

  • SHA1

    8c8bef0e4195df67bff3692bdd50154d25a8b3fc

  • SHA256

    649f7c795519e022479451575ca0fa064e5479d0b484c8deb2a82cfb9034eae3

  • SHA512

    0923bc22009234839ea8410ccd3922aef7733df1f5c1403255c854c8dc21234d0fd4c2bee2327f7a302cbbf1e3c0c043e41d92a4dc3532d10fb2f3303e1aa4e5

  • SSDEEP

    768:66zL8fIoH4zjb4nHbAM5Tn/eJHIkUx1IAdvErAMKr9ZgAk+Khy2:66z8I34n7X5T/FrGhow7l

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\shoot.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1744-6-0x000007FEFABA0000-0x000007FEFABD4000-memory.dmp

    Filesize

    208KB

  • memory/1744-5-0x000000013FF50000-0x0000000140048000-memory.dmp

    Filesize

    992KB

  • memory/1744-7-0x000007FEF5F20000-0x000007FEF61D4000-memory.dmp

    Filesize

    2.7MB

  • memory/1744-8-0x000007FEFB500000-0x000007FEFB518000-memory.dmp

    Filesize

    96KB

  • memory/1744-9-0x000007FEFAB80000-0x000007FEFAB97000-memory.dmp

    Filesize

    92KB

  • memory/1744-10-0x000007FEFAB60000-0x000007FEFAB71000-memory.dmp

    Filesize

    68KB

  • memory/1744-11-0x000007FEF7930000-0x000007FEF7947000-memory.dmp

    Filesize

    92KB

  • memory/1744-12-0x000007FEF77B0000-0x000007FEF77C1000-memory.dmp

    Filesize

    68KB

  • memory/1744-13-0x000007FEF7710000-0x000007FEF772D000-memory.dmp

    Filesize

    116KB

  • memory/1744-14-0x000007FEF76F0000-0x000007FEF7701000-memory.dmp

    Filesize

    68KB

  • memory/1744-15-0x000007FEF5D20000-0x000007FEF5F20000-memory.dmp

    Filesize

    2.0MB

  • memory/1744-19-0x000007FEF7660000-0x000007FEF7678000-memory.dmp

    Filesize

    96KB

  • memory/1744-18-0x000007FEF7680000-0x000007FEF76A1000-memory.dmp

    Filesize

    132KB

  • memory/1744-17-0x000007FEF76B0000-0x000007FEF76EF000-memory.dmp

    Filesize

    252KB

  • memory/1744-16-0x000007FEF4C70000-0x000007FEF5D1B000-memory.dmp

    Filesize

    16.7MB

  • memory/1744-20-0x000007FEF6B30000-0x000007FEF6B41000-memory.dmp

    Filesize

    68KB

  • memory/1744-21-0x000007FEF6B10000-0x000007FEF6B21000-memory.dmp

    Filesize

    68KB

  • memory/1744-22-0x000007FEF6AF0000-0x000007FEF6B01000-memory.dmp

    Filesize

    68KB

  • memory/1744-23-0x000007FEF6AD0000-0x000007FEF6AEB000-memory.dmp

    Filesize

    108KB

  • memory/1744-24-0x000007FEF6640000-0x000007FEF6651000-memory.dmp

    Filesize

    68KB

  • memory/1744-25-0x000007FEF6620000-0x000007FEF6638000-memory.dmp

    Filesize

    96KB

  • memory/1744-26-0x000007FEF65F0000-0x000007FEF6620000-memory.dmp

    Filesize

    192KB

  • memory/1744-27-0x000007FEF6580000-0x000007FEF65E7000-memory.dmp

    Filesize

    412KB

  • memory/1744-29-0x000007FEF6560000-0x000007FEF6571000-memory.dmp

    Filesize

    68KB

  • memory/1744-28-0x000007FEF4C00000-0x000007FEF4C6F000-memory.dmp

    Filesize

    444KB

  • memory/1744-30-0x000007FEF4BA0000-0x000007FEF4BFC000-memory.dmp

    Filesize

    368KB

  • memory/1744-31-0x000007FEF4B40000-0x000007FEF4B96000-memory.dmp

    Filesize

    344KB

  • memory/1744-32-0x000007FEF4B10000-0x000007FEF4B38000-memory.dmp

    Filesize

    160KB

  • memory/1744-33-0x000007FEF4AE0000-0x000007FEF4B04000-memory.dmp

    Filesize

    144KB

  • memory/1744-34-0x000007FEF4AC0000-0x000007FEF4AD7000-memory.dmp

    Filesize

    92KB

  • memory/1744-35-0x000007FEF4A90000-0x000007FEF4AB3000-memory.dmp

    Filesize

    140KB

  • memory/1744-36-0x000007FEF4A70000-0x000007FEF4A81000-memory.dmp

    Filesize

    68KB

  • memory/1744-38-0x000007FEF4A20000-0x000007FEF4A41000-memory.dmp

    Filesize

    132KB

  • memory/1744-37-0x000007FEF4A50000-0x000007FEF4A62000-memory.dmp

    Filesize

    72KB

  • memory/1744-39-0x000007FEF4A00000-0x000007FEF4A13000-memory.dmp

    Filesize

    76KB

  • memory/1744-40-0x000007FEF4880000-0x000007FEF49F8000-memory.dmp

    Filesize

    1.5MB

  • memory/1744-42-0x000007FEFB160000-0x000007FEFB170000-memory.dmp

    Filesize

    64KB

  • memory/1744-41-0x000007FEF4860000-0x000007FEF4877000-memory.dmp

    Filesize

    92KB

  • memory/1744-44-0x000007FEF4810000-0x000007FEF4821000-memory.dmp

    Filesize

    68KB

  • memory/1744-43-0x000007FEF4830000-0x000007FEF485F000-memory.dmp

    Filesize

    188KB

  • memory/1744-45-0x000007FEF47F0000-0x000007FEF4806000-memory.dmp

    Filesize

    88KB

  • memory/1744-47-0x000007FEF4790000-0x000007FEF47A1000-memory.dmp

    Filesize

    68KB

  • memory/1744-46-0x000007FEF47D0000-0x000007FEF47E5000-memory.dmp

    Filesize

    84KB

  • memory/1744-48-0x000007FEF4770000-0x000007FEF4782000-memory.dmp

    Filesize

    72KB

  • memory/1744-49-0x000007FEF45F0000-0x000007FEF476A000-memory.dmp

    Filesize

    1.5MB

  • memory/1744-50-0x000007FEF45D0000-0x000007FEF45E3000-memory.dmp

    Filesize

    76KB

  • memory/1744-51-0x000007FEF45B0000-0x000007FEF45C4000-memory.dmp

    Filesize

    80KB

  • memory/1744-52-0x000007FEF4590000-0x000007FEF45A1000-memory.dmp

    Filesize

    68KB

  • memory/1744-53-0x000007FEF4570000-0x000007FEF4581000-memory.dmp

    Filesize

    68KB

  • memory/1744-54-0x000007FEF4550000-0x000007FEF4561000-memory.dmp

    Filesize

    68KB

  • memory/1744-55-0x000007FEF4530000-0x000007FEF4546000-memory.dmp

    Filesize

    88KB