Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231025-en
  • resource tags

    arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
  • submitted
    06/11/2023, 01:26

General

  • Target

    7274110982086036741.mov

  • Size

    854KB

  • MD5

    3e65f133032a11347c7fe3ad829e5696

  • SHA1

    37729f8dbb3c85c5a59210e556ae8502aef3675b

  • SHA256

    062f2c08c156b9ae3228ebfdd2f92e8215a31e3a8d8450a6fee53a5b1083cc0f

  • SHA512

    07bcba0b62a6bd593d9bba8c7b74c591a7f3a2afb62dccbbceb8b12b171be3e9698890b280a8c3156c08f9ca26bed09e72604e85ae11d1a1083ff8cd323117ee

  • SSDEEP

    24576:geqcpgKIa4GlrPx2cYwXyWqk4Gw24jETCjnP665Xd:vqygKIa4GNcDpk4GN2P665Xd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 30 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\7274110982086036741.mov"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2448-5-0x000000013F1A0000-0x000000013F298000-memory.dmp

    Filesize

    992KB

  • memory/2448-6-0x000007FEF79B0000-0x000007FEF79E4000-memory.dmp

    Filesize

    208KB

  • memory/2448-7-0x000007FEF61D0000-0x000007FEF6484000-memory.dmp

    Filesize

    2.7MB

  • memory/2448-8-0x000007FEFBA80000-0x000007FEFBA98000-memory.dmp

    Filesize

    96KB

  • memory/2448-9-0x000007FEF7A20000-0x000007FEF7A37000-memory.dmp

    Filesize

    92KB

  • memory/2448-10-0x000007FEF7970000-0x000007FEF7981000-memory.dmp

    Filesize

    68KB

  • memory/2448-11-0x000007FEF7450000-0x000007FEF7467000-memory.dmp

    Filesize

    92KB

  • memory/2448-12-0x000007FEF7430000-0x000007FEF7441000-memory.dmp

    Filesize

    68KB

  • memory/2448-13-0x000007FEF7410000-0x000007FEF742D000-memory.dmp

    Filesize

    116KB

  • memory/2448-14-0x000007FEF73F0000-0x000007FEF7401000-memory.dmp

    Filesize

    68KB

  • memory/2448-15-0x000007FEF5FD0000-0x000007FEF61D0000-memory.dmp

    Filesize

    2.0MB

  • memory/2448-16-0x000007FEF4F20000-0x000007FEF5FCB000-memory.dmp

    Filesize

    16.7MB

  • memory/2448-17-0x000007FEF6E30000-0x000007FEF6E6F000-memory.dmp

    Filesize

    252KB

  • memory/2448-18-0x000007FEF6E00000-0x000007FEF6E21000-memory.dmp

    Filesize

    132KB

  • memory/2448-19-0x000007FEF73D0000-0x000007FEF73E8000-memory.dmp

    Filesize

    96KB

  • memory/2448-20-0x000007FEF6DE0000-0x000007FEF6DF1000-memory.dmp

    Filesize

    68KB

  • memory/2448-21-0x000007FEF68F0000-0x000007FEF6901000-memory.dmp

    Filesize

    68KB

  • memory/2448-22-0x000007FEF68D0000-0x000007FEF68E1000-memory.dmp

    Filesize

    68KB

  • memory/2448-24-0x000007FEF6890000-0x000007FEF68A1000-memory.dmp

    Filesize

    68KB

  • memory/2448-25-0x000007FEF6870000-0x000007FEF6888000-memory.dmp

    Filesize

    96KB

  • memory/2448-26-0x000007FEF6840000-0x000007FEF6870000-memory.dmp

    Filesize

    192KB

  • memory/2448-27-0x000007FEF4EB0000-0x000007FEF4F17000-memory.dmp

    Filesize

    412KB

  • memory/2448-23-0x000007FEF68B0000-0x000007FEF68CB000-memory.dmp

    Filesize

    108KB

  • memory/2448-28-0x000007FEF4E40000-0x000007FEF4EAF000-memory.dmp

    Filesize

    444KB

  • memory/2448-29-0x000007FEF6820000-0x000007FEF6831000-memory.dmp

    Filesize

    68KB

  • memory/2448-30-0x000007FEF4DE0000-0x000007FEF4E36000-memory.dmp

    Filesize

    344KB

  • memory/2448-31-0x000007FEF4C60000-0x000007FEF4DD8000-memory.dmp

    Filesize

    1.5MB

  • memory/2448-32-0x000007FEF6800000-0x000007FEF6817000-memory.dmp

    Filesize

    92KB

  • memory/2448-33-0x000007FEF4AF0000-0x000007FEF4C60000-memory.dmp

    Filesize

    1.4MB

  • memory/2448-34-0x000007FEF4AD0000-0x000007FEF4AE2000-memory.dmp

    Filesize

    72KB

  • memory/2448-35-0x000007FEF4A80000-0x000007FEF4AC2000-memory.dmp

    Filesize

    264KB

  • memory/2448-36-0x000007FEF4A30000-0x000007FEF4A7C000-memory.dmp

    Filesize

    304KB

  • memory/2448-37-0x000007FEF48C0000-0x000007FEF4A2B000-memory.dmp

    Filesize

    1.4MB

  • memory/2448-38-0x000007FEF4860000-0x000007FEF48B7000-memory.dmp

    Filesize

    348KB

  • memory/2448-39-0x000007FEF4610000-0x000007FEF485B000-memory.dmp

    Filesize

    2.3MB

  • memory/2448-40-0x000007FEF2E60000-0x000007FEF4610000-memory.dmp

    Filesize

    23.7MB

  • memory/2448-41-0x000007FEF7A10000-0x000007FEF7A20000-memory.dmp

    Filesize

    64KB

  • memory/2448-42-0x000007FEF2E30000-0x000007FEF2E5F000-memory.dmp

    Filesize

    188KB

  • memory/2448-44-0x000007FEF2DF0000-0x000007FEF2E06000-memory.dmp

    Filesize

    88KB

  • memory/2448-43-0x000007FEF2E10000-0x000007FEF2E21000-memory.dmp

    Filesize

    68KB

  • memory/2448-45-0x000007FEF2D20000-0x000007FEF2DE5000-memory.dmp

    Filesize

    788KB

  • memory/2448-46-0x000007FEF2CA0000-0x000007FEF2D15000-memory.dmp

    Filesize

    468KB

  • memory/2448-47-0x000007FEF2C30000-0x000007FEF2C92000-memory.dmp

    Filesize

    392KB

  • memory/2448-48-0x000007FEF2BC0000-0x000007FEF2C2D000-memory.dmp

    Filesize

    436KB

  • memory/2448-49-0x000007FEF2BA0000-0x000007FEF2BB3000-memory.dmp

    Filesize

    76KB

  • memory/2448-50-0x000007FEF2B80000-0x000007FEF2B94000-memory.dmp

    Filesize

    80KB

  • memory/2448-51-0x000007FEF2B30000-0x000007FEF2B80000-memory.dmp

    Filesize

    320KB

  • memory/2448-52-0x000007FEF2B10000-0x000007FEF2B25000-memory.dmp

    Filesize

    84KB

  • memory/2448-53-0x000007FEF28F0000-0x000007FEF2B0D000-memory.dmp

    Filesize

    2.1MB

  • memory/2448-54-0x000007FEF28D0000-0x000007FEF28E5000-memory.dmp

    Filesize

    84KB

  • memory/2448-55-0x000007FEF2880000-0x000007FEF28A3000-memory.dmp

    Filesize

    140KB

  • memory/2448-56-0x000007FEF2860000-0x000007FEF2871000-memory.dmp

    Filesize

    68KB

  • memory/2448-57-0x000007FEF2840000-0x000007FEF2852000-memory.dmp

    Filesize

    72KB

  • memory/2448-58-0x000007FEF2820000-0x000007FEF2833000-memory.dmp

    Filesize

    76KB

  • memory/2448-61-0x000007FEF26A0000-0x000007FEF281A000-memory.dmp

    Filesize

    1.5MB

  • memory/2448-62-0x000007FEF25A0000-0x000007FEF2694000-memory.dmp

    Filesize

    976KB

  • memory/2448-63-0x000007FEF2570000-0x000007FEF259A000-memory.dmp

    Filesize

    168KB

  • memory/2448-64-0x000007FEF2550000-0x000007FEF2563000-memory.dmp

    Filesize

    76KB

  • memory/2448-65-0x000007FEF2530000-0x000007FEF254B000-memory.dmp

    Filesize

    108KB

  • memory/2448-66-0x000007FEF2510000-0x000007FEF2522000-memory.dmp

    Filesize

    72KB

  • memory/2448-67-0x000007FEF24F0000-0x000007FEF2505000-memory.dmp

    Filesize

    84KB

  • memory/2448-68-0x000007FEF24D0000-0x000007FEF24E3000-memory.dmp

    Filesize

    76KB

  • memory/2448-69-0x000007FEF24B0000-0x000007FEF24C4000-memory.dmp

    Filesize

    80KB

  • memory/2448-70-0x000007FEF2490000-0x000007FEF24A2000-memory.dmp

    Filesize

    72KB