Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
14/10/2023, 11:48
231014-nyndpsde4x 614/10/2023, 11:44
231014-nwjbzadd9t 814/10/2023, 11:41
231014-ntrwbsfd89 6Analysis
-
max time kernel
92s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
14/10/2023, 11:41
Static task
static1
Behavioral task
behavioral1
Sample
cinematic-trailer-orchestra-by-infraction-no-copyright-music-glorious-hero.mp3
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
cinematic-trailer-orchestra-by-infraction-no-copyright-music-glorious-hero.mp3
Resource
win10v2004-20230915-en
General
-
Target
cinematic-trailer-orchestra-by-infraction-no-copyright-music-glorious-hero.mp3
-
Size
2.5MB
-
MD5
9b2dddbb16c4bbd11888d273d6360590
-
SHA1
caf4189d34c26ba0d7cb5d246fded473e9733a1c
-
SHA256
878cfe83aad6c5b30ee37d802bc14567e8593d80e02102d7c423908f6a3fb869
-
SHA512
3352aa87c7e4913829d169f508418aeaedce5a352dde93fa76e1ed355cd31c5961d198b8928200f8b59b02a8ac21aa215a2438ac89c004f0a718b0f337d0317a
-
SSDEEP
49152:jKL1F3td7Nie3jpNsV6Vc2lKKomylm4YkrdXnvravpFE2LhABdSJbZ:UzXie3jxVtl3Glm43zavpBLSXcZ
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1924 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1924 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 1924 vlc.exe Token: SeIncBasePriorityPrivilege 1924 vlc.exe -
Suspicious use of FindShellTrayWindow 12 IoCs
pid Process 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe -
Suspicious use of SendNotifyMessage 10 IoCs
pid Process 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe 1924 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1924 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\cinematic-trailer-orchestra-by-infraction-no-copyright-music-glorious-hero.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1924
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe"1⤵PID:3044