Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231025-en -
resource tags
arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system -
submitted
06/11/2023, 01:26
Static task
static1
Behavioral task
behavioral1
Sample
7274110982086036741.mov
Resource
win7-20231025-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
7274110982086036741.mov
Resource
win10-20231020-en
8 signatures
150 seconds
General
-
Target
7274110982086036741.mov
-
Size
854KB
-
MD5
3e65f133032a11347c7fe3ad829e5696
-
SHA1
37729f8dbb3c85c5a59210e556ae8502aef3675b
-
SHA256
062f2c08c156b9ae3228ebfdd2f92e8215a31e3a8d8450a6fee53a5b1083cc0f
-
SHA512
07bcba0b62a6bd593d9bba8c7b74c591a7f3a2afb62dccbbceb8b12b171be3e9698890b280a8c3156c08f9ca26bed09e72604e85ae11d1a1083ff8cd323117ee
-
SSDEEP
24576:geqcpgKIa4GlrPx2cYwXyWqk4Gw24jETCjnP665Xd:vqygKIa4GNcDpk4GN2P665Xd
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2448 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2448 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2448 vlc.exe Token: SeIncBasePriorityPrivilege 2448 vlc.exe -
Suspicious use of FindShellTrayWindow 30 IoCs
pid Process 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2448 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\7274110982086036741.mov"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2448