Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

14/10/2023, 11:48

231014-nyndpsde4x 6

14/10/2023, 11:44

231014-nwjbzadd9t 8

14/10/2023, 11:41

231014-ntrwbsfd89 6

Analysis

  • max time kernel
    92s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2023, 11:41

General

  • Target

    cinematic-trailer-orchestra-by-infraction-no-copyright-music-glorious-hero.mp3

  • Size

    2.5MB

  • MD5

    9b2dddbb16c4bbd11888d273d6360590

  • SHA1

    caf4189d34c26ba0d7cb5d246fded473e9733a1c

  • SHA256

    878cfe83aad6c5b30ee37d802bc14567e8593d80e02102d7c423908f6a3fb869

  • SHA512

    3352aa87c7e4913829d169f508418aeaedce5a352dde93fa76e1ed355cd31c5961d198b8928200f8b59b02a8ac21aa215a2438ac89c004f0a718b0f337d0317a

  • SSDEEP

    49152:jKL1F3td7Nie3jpNsV6Vc2lKKomylm4YkrdXnvravpFE2LhABdSJbZ:UzXie3jxVtl3Glm43zavpBLSXcZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 12 IoCs
  • Suspicious use of SendNotifyMessage 10 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\cinematic-trailer-orchestra-by-infraction-no-copyright-music-glorious-hero.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1924
  • C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    1⤵
      PID:3044

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1924-5-0x000000013FAF0000-0x000000013FBE8000-memory.dmp

      Filesize

      992KB

    • memory/1924-6-0x000007FEF7D40000-0x000007FEF7D74000-memory.dmp

      Filesize

      208KB

    • memory/1924-7-0x000007FEF64F0000-0x000007FEF67A4000-memory.dmp

      Filesize

      2.7MB

    • memory/1924-8-0x000007FEFBEA0000-0x000007FEFBEB8000-memory.dmp

      Filesize

      96KB

    • memory/1924-9-0x000007FEF7DB0000-0x000007FEF7DC7000-memory.dmp

      Filesize

      92KB

    • memory/1924-10-0x000007FEF7D00000-0x000007FEF7D11000-memory.dmp

      Filesize

      68KB

    • memory/1924-12-0x000007FEF7130000-0x000007FEF7141000-memory.dmp

      Filesize

      68KB

    • memory/1924-11-0x000007FEF7310000-0x000007FEF7327000-memory.dmp

      Filesize

      92KB

    • memory/1924-14-0x000007FEF70F0000-0x000007FEF7101000-memory.dmp

      Filesize

      68KB

    • memory/1924-13-0x000007FEF7110000-0x000007FEF712D000-memory.dmp

      Filesize

      116KB

    • memory/1924-15-0x000007FEF5440000-0x000007FEF64EB000-memory.dmp

      Filesize

      16.7MB

    • memory/1924-16-0x000007FEF5240000-0x000007FEF5440000-memory.dmp

      Filesize

      2.0MB

    • memory/1924-20-0x000007FEF6BF0000-0x000007FEF6C01000-memory.dmp

      Filesize

      68KB

    • memory/1924-23-0x000007FEF6B90000-0x000007FEF6BAB000-memory.dmp

      Filesize

      108KB

    • memory/1924-22-0x000007FEF6BB0000-0x000007FEF6BC1000-memory.dmp

      Filesize

      68KB

    • memory/1924-21-0x000007FEF6BD0000-0x000007FEF6BE1000-memory.dmp

      Filesize

      68KB

    • memory/1924-19-0x000007FEF6C10000-0x000007FEF6C28000-memory.dmp

      Filesize

      96KB

    • memory/1924-18-0x000007FEF6CA0000-0x000007FEF6CC1000-memory.dmp

      Filesize

      132KB

    • memory/1924-17-0x000007FEF6CD0000-0x000007FEF6D0F000-memory.dmp

      Filesize

      252KB

    • memory/1924-24-0x000007FEF6B70000-0x000007FEF6B81000-memory.dmp

      Filesize

      68KB

    • memory/1924-25-0x000007FEF6B50000-0x000007FEF6B68000-memory.dmp

      Filesize

      96KB

    • memory/1924-26-0x000007FEF6B20000-0x000007FEF6B50000-memory.dmp

      Filesize

      192KB

    • memory/1924-27-0x000007FEF51D0000-0x000007FEF5237000-memory.dmp

      Filesize

      412KB

    • memory/1924-28-0x000007FEF5160000-0x000007FEF51CF000-memory.dmp

      Filesize

      444KB

    • memory/1924-29-0x000007FEF5140000-0x000007FEF5151000-memory.dmp

      Filesize

      68KB

    • memory/1924-32-0x000007FEF50A0000-0x000007FEF50F7000-memory.dmp

      Filesize

      348KB

    • memory/1924-31-0x000007FEF5100000-0x000007FEF5111000-memory.dmp

      Filesize

      68KB

    • memory/1924-30-0x000007FEF5120000-0x000007FEF5137000-memory.dmp

      Filesize

      92KB

    • memory/1924-33-0x000007FEF5070000-0x000007FEF509F000-memory.dmp

      Filesize

      188KB

    • memory/1924-34-0x000007FEF5050000-0x000007FEF5063000-memory.dmp

      Filesize

      76KB

    • memory/1924-35-0x000007FEF5030000-0x000007FEF5041000-memory.dmp

      Filesize

      68KB

    • memory/1924-40-0x000007FEF4EE0000-0x000007FEF4EF2000-memory.dmp

      Filesize

      72KB

    • memory/1924-49-0x000007FEF4DA0000-0x000007FEF4DB7000-memory.dmp

      Filesize

      92KB

    • memory/1924-48-0x000007FEF4DC0000-0x000007FEF4DF0000-memory.dmp

      Filesize

      192KB

    • memory/1924-47-0x000007FEF4DF0000-0x000007FEF4E02000-memory.dmp

      Filesize

      72KB

    • memory/1924-46-0x000007FEF4E10000-0x000007FEF4E3C000-memory.dmp

      Filesize

      176KB

    • memory/1924-45-0x000007FEF4E40000-0x000007FEF4E54000-memory.dmp

      Filesize

      80KB

    • memory/1924-44-0x000007FEF4E60000-0x000007FEF4E75000-memory.dmp

      Filesize

      84KB

    • memory/1924-43-0x000007FEF4E80000-0x000007FEF4E96000-memory.dmp

      Filesize

      88KB

    • memory/1924-42-0x000007FEF4EA0000-0x000007FEF4EBE000-memory.dmp

      Filesize

      120KB

    • memory/1924-41-0x000007FEF4EC0000-0x000007FEF4ED4000-memory.dmp

      Filesize

      80KB

    • memory/1924-39-0x000007FEF4F00000-0x000007FEF4F14000-memory.dmp

      Filesize

      80KB

    • memory/1924-38-0x000007FEF4F20000-0x000007FEF4F31000-memory.dmp

      Filesize

      68KB

    • memory/1924-37-0x000007FEF4F40000-0x000007FEF4F52000-memory.dmp

      Filesize

      72KB

    • memory/1924-36-0x000007FEF4F60000-0x000007FEF5025000-memory.dmp

      Filesize

      788KB

    • memory/1924-50-0x000007FEF35F0000-0x000007FEF4DA0000-memory.dmp

      Filesize

      23.7MB

    • memory/1924-51-0x000007FEF35D0000-0x000007FEF35E1000-memory.dmp

      Filesize

      68KB

    • memory/1924-52-0x000007FEF35B0000-0x000007FEF35C2000-memory.dmp

      Filesize

      72KB

    • memory/1924-54-0x000007FEF3410000-0x000007FEF3427000-memory.dmp

      Filesize

      92KB

    • memory/1924-58-0x000007FEF7DA0000-0x000007FEF7DB0000-memory.dmp

      Filesize

      64KB

    • memory/1924-59-0x000007FEF3330000-0x000007FEF3346000-memory.dmp

      Filesize

      88KB

    • memory/1924-57-0x000007FEF3350000-0x000007FEF3374000-memory.dmp

      Filesize

      144KB

    • memory/1924-56-0x000007FEF3380000-0x000007FEF33A8000-memory.dmp

      Filesize

      160KB

    • memory/1924-55-0x000007FEF33B0000-0x000007FEF3406000-memory.dmp

      Filesize

      344KB

    • memory/1924-53-0x000007FEF3430000-0x000007FEF35A8000-memory.dmp

      Filesize

      1.5MB

    • memory/1924-60-0x000007FEF32B0000-0x000007FEF3325000-memory.dmp

      Filesize

      468KB

    • memory/1924-61-0x000007FEF3240000-0x000007FEF32A2000-memory.dmp

      Filesize

      392KB

    • memory/1924-65-0x000007FEF3150000-0x000007FEF3162000-memory.dmp

      Filesize

      72KB

    • memory/1924-64-0x000007FEF3190000-0x000007FEF31A1000-memory.dmp

      Filesize

      68KB

    • memory/1924-63-0x000007FEF31B0000-0x000007FEF31C5000-memory.dmp

      Filesize

      84KB

    • memory/1924-62-0x000007FEF31D0000-0x000007FEF323D000-memory.dmp

      Filesize

      436KB

    • memory/1924-66-0x000007FEF2FD0000-0x000007FEF314A000-memory.dmp

      Filesize

      1.5MB