Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2023, 07:18

General

  • Target

    uh.ogg

  • Size

    14KB

  • MD5

    9223b207343d8cea833932df3ee65218

  • SHA1

    c4d216d376b6a498b3917d88d8c120ee30bb109b

  • SHA256

    bd7bfac235f120e746e0e31374df5a2fb20844a80e79551324fe76387d5d7395

  • SHA512

    d3d2d9824972088d8856bb4318304a81e3224fe4f41a3ac537e306827de3d5cb4c24b76dc03d7f8ff0b6917de84a36e41eaeb2d5751e9467653e3c281ad2fc43

  • SSDEEP

    192:Eqk+XioqPKNLKt9AadirT9NayoNGa9eDT9NayoNGa9eDT9hCMT2cGt/RwSFbjkmB:EGi4xOi3Xay2ePXay2ePYHtJ1Fbjk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\uh.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2800-5-0x000000013F5C0000-0x000000013F6B8000-memory.dmp

    Filesize

    992KB

  • memory/2800-6-0x000007FEF7650000-0x000007FEF7684000-memory.dmp

    Filesize

    208KB

  • memory/2800-7-0x000007FEF5B40000-0x000007FEF5DF4000-memory.dmp

    Filesize

    2.7MB

  • memory/2800-8-0x000007FEFB1F0000-0x000007FEFB208000-memory.dmp

    Filesize

    96KB

  • memory/2800-9-0x000007FEFAC70000-0x000007FEFAC87000-memory.dmp

    Filesize

    92KB

  • memory/2800-10-0x000007FEF76A0000-0x000007FEF76B1000-memory.dmp

    Filesize

    68KB

  • memory/2800-11-0x000007FEF6D50000-0x000007FEF6D67000-memory.dmp

    Filesize

    92KB

  • memory/2800-12-0x000007FEF67C0000-0x000007FEF67D1000-memory.dmp

    Filesize

    68KB

  • memory/2800-13-0x000007FEF67A0000-0x000007FEF67BD000-memory.dmp

    Filesize

    116KB

  • memory/2800-14-0x000007FEF5940000-0x000007FEF5B40000-memory.dmp

    Filesize

    2.0MB

  • memory/2800-15-0x000007FEF6780000-0x000007FEF6791000-memory.dmp

    Filesize

    68KB

  • memory/2800-16-0x000007FEF6240000-0x000007FEF627F000-memory.dmp

    Filesize

    252KB

  • memory/2800-17-0x000007FEF6750000-0x000007FEF6771000-memory.dmp

    Filesize

    132KB

  • memory/2800-18-0x000007FEF6220000-0x000007FEF6238000-memory.dmp

    Filesize

    96KB

  • memory/2800-19-0x000007FEF6200000-0x000007FEF6211000-memory.dmp

    Filesize

    68KB

  • memory/2800-20-0x000007FEF61E0000-0x000007FEF61F1000-memory.dmp

    Filesize

    68KB

  • memory/2800-21-0x000007FEF61C0000-0x000007FEF61D1000-memory.dmp

    Filesize

    68KB

  • memory/2800-22-0x000007FEF61A0000-0x000007FEF61BB000-memory.dmp

    Filesize

    108KB

  • memory/2800-23-0x000007FEF6180000-0x000007FEF6191000-memory.dmp

    Filesize

    68KB

  • memory/2800-24-0x000007FEF5920000-0x000007FEF5938000-memory.dmp

    Filesize

    96KB

  • memory/2800-25-0x000007FEF58F0000-0x000007FEF5920000-memory.dmp

    Filesize

    192KB

  • memory/2800-26-0x000007FEF4840000-0x000007FEF58EB000-memory.dmp

    Filesize

    16.7MB

  • memory/2800-27-0x000007FEF47D0000-0x000007FEF4837000-memory.dmp

    Filesize

    412KB

  • memory/2800-28-0x000007FEF4760000-0x000007FEF47CF000-memory.dmp

    Filesize

    444KB

  • memory/2800-29-0x000007FEF4740000-0x000007FEF4751000-memory.dmp

    Filesize

    68KB

  • memory/2800-30-0x000007FEF46E0000-0x000007FEF473C000-memory.dmp

    Filesize

    368KB

  • memory/2800-31-0x000007FEF4680000-0x000007FEF46D6000-memory.dmp

    Filesize

    344KB

  • memory/2800-32-0x000007FEF4650000-0x000007FEF4678000-memory.dmp

    Filesize

    160KB

  • memory/2800-33-0x000007FEF4620000-0x000007FEF4644000-memory.dmp

    Filesize

    144KB

  • memory/2800-34-0x000007FEF4600000-0x000007FEF4617000-memory.dmp

    Filesize

    92KB

  • memory/2800-35-0x000007FEF45D0000-0x000007FEF45F3000-memory.dmp

    Filesize

    140KB

  • memory/2800-37-0x000007FEF4590000-0x000007FEF45A2000-memory.dmp

    Filesize

    72KB

  • memory/2800-36-0x000007FEF45B0000-0x000007FEF45C1000-memory.dmp

    Filesize

    68KB

  • memory/2800-38-0x000007FEF4560000-0x000007FEF4581000-memory.dmp

    Filesize

    132KB

  • memory/2800-39-0x000007FEF4540000-0x000007FEF4553000-memory.dmp

    Filesize

    76KB

  • memory/2800-40-0x000007FEF43C0000-0x000007FEF4538000-memory.dmp

    Filesize

    1.5MB

  • memory/2800-41-0x000007FEF43A0000-0x000007FEF43B7000-memory.dmp

    Filesize

    92KB

  • memory/2800-42-0x000007FEF7710000-0x000007FEF7720000-memory.dmp

    Filesize

    64KB

  • memory/2800-43-0x000007FEF4370000-0x000007FEF439F000-memory.dmp

    Filesize

    188KB

  • memory/2800-44-0x000007FEF4350000-0x000007FEF4361000-memory.dmp

    Filesize

    68KB

  • memory/2800-45-0x000007FEF4330000-0x000007FEF4346000-memory.dmp

    Filesize

    88KB

  • memory/2800-46-0x000007FEF4310000-0x000007FEF4325000-memory.dmp

    Filesize

    84KB

  • memory/2800-48-0x000007FEF42B0000-0x000007FEF42C2000-memory.dmp

    Filesize

    72KB

  • memory/2800-47-0x000007FEF42F0000-0x000007FEF4301000-memory.dmp

    Filesize

    68KB

  • memory/2800-49-0x000007FEF4130000-0x000007FEF42AA000-memory.dmp

    Filesize

    1.5MB

  • memory/2800-50-0x000007FEF4110000-0x000007FEF4123000-memory.dmp

    Filesize

    76KB

  • memory/2800-51-0x000007FEF40F0000-0x000007FEF4104000-memory.dmp

    Filesize

    80KB

  • memory/2800-52-0x000007FEF40D0000-0x000007FEF40E1000-memory.dmp

    Filesize

    68KB

  • memory/2800-53-0x000007FEF40B0000-0x000007FEF40C1000-memory.dmp

    Filesize

    68KB

  • memory/2800-54-0x000007FEF4090000-0x000007FEF40A1000-memory.dmp

    Filesize

    68KB

  • memory/2800-55-0x000007FEF4070000-0x000007FEF4086000-memory.dmp

    Filesize

    88KB