Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    158s
  • platform
    windows7_x64
  • resource
    win7-20231020-es
  • resource tags

    arch:x64arch:x86image:win7-20231020-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    07/11/2023, 13:42 UTC

General

  • Target

    GF_2.ogg

  • Size

    8KB

  • MD5

    bfcebbd1acbb5af15dbd38556a0711ae

  • SHA1

    f2fd464a72166d4951791111fdcb62e90de0b3f9

  • SHA256

    0e3c528e6dda75a4ca6593c090e6f02e941696c8daebeb38a25612e35c6697ee

  • SHA512

    7f48b732454f7efbab8584159afd9112897a145f5c99960eb0e4633605a38d2452f7228c81d6c162a32654098d7cf1425789a91713eb1edf00edad4dca93673d

  • SSDEEP

    192:+/ttxOIOWOKxCPs4OLgd9jW5MyjqAYetJiY4YMdqKZ8m4JriGnEjz:+/tDzCPxO1qAdJiZNMKGU/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\GF_2.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2160-5-0x000000013F080000-0x000000013F178000-memory.dmp

    Filesize

    992KB

  • memory/2160-6-0x000007FEFA890000-0x000007FEFA8C4000-memory.dmp

    Filesize

    208KB

  • memory/2160-7-0x000007FEF5C10000-0x000007FEF5EC4000-memory.dmp

    Filesize

    2.7MB

  • memory/2160-8-0x000007FEFB250000-0x000007FEFB268000-memory.dmp

    Filesize

    96KB

  • memory/2160-9-0x000007FEFA900000-0x000007FEFA917000-memory.dmp

    Filesize

    92KB

  • memory/2160-10-0x000007FEFA410000-0x000007FEFA421000-memory.dmp

    Filesize

    68KB

  • memory/2160-12-0x000007FEFA3D0000-0x000007FEFA3E1000-memory.dmp

    Filesize

    68KB

  • memory/2160-11-0x000007FEFA3F0000-0x000007FEFA407000-memory.dmp

    Filesize

    92KB

  • memory/2160-13-0x000007FEF7460000-0x000007FEF747D000-memory.dmp

    Filesize

    116KB

  • memory/2160-14-0x000007FEF7330000-0x000007FEF7341000-memory.dmp

    Filesize

    68KB

  • memory/2160-15-0x000007FEF49A0000-0x000007FEF5A4B000-memory.dmp

    Filesize

    16.7MB

  • memory/2160-16-0x000007FEF47A0000-0x000007FEF49A0000-memory.dmp

    Filesize

    2.0MB

  • memory/2160-17-0x000007FEF7150000-0x000007FEF718F000-memory.dmp

    Filesize

    252KB

  • memory/2160-18-0x000007FEF7120000-0x000007FEF7141000-memory.dmp

    Filesize

    132KB

  • memory/2160-19-0x000007FEF7100000-0x000007FEF7118000-memory.dmp

    Filesize

    96KB

  • memory/2160-20-0x000007FEF70E0000-0x000007FEF70F1000-memory.dmp

    Filesize

    68KB

  • memory/2160-21-0x000007FEF70C0000-0x000007FEF70D1000-memory.dmp

    Filesize

    68KB

  • memory/2160-22-0x000007FEF70A0000-0x000007FEF70B1000-memory.dmp

    Filesize

    68KB

  • memory/2160-23-0x000007FEF6B00000-0x000007FEF6B1B000-memory.dmp

    Filesize

    108KB

  • memory/2160-24-0x000007FEF6AE0000-0x000007FEF6AF1000-memory.dmp

    Filesize

    68KB

  • memory/2160-27-0x000007FEF64B0000-0x000007FEF6517000-memory.dmp

    Filesize

    412KB

  • memory/2160-26-0x000007FEF6A90000-0x000007FEF6AC0000-memory.dmp

    Filesize

    192KB

  • memory/2160-25-0x000007FEF6AC0000-0x000007FEF6AD8000-memory.dmp

    Filesize

    96KB

  • memory/2160-28-0x000007FEF4730000-0x000007FEF479F000-memory.dmp

    Filesize

    444KB

  • memory/2160-29-0x000007FEF6490000-0x000007FEF64A1000-memory.dmp

    Filesize

    68KB

  • memory/2160-30-0x000007FEF46D0000-0x000007FEF472C000-memory.dmp

    Filesize

    368KB

  • memory/2160-31-0x000007FEF4550000-0x000007FEF46C8000-memory.dmp

    Filesize

    1.5MB

  • memory/2160-33-0x000007FEFA9D0000-0x000007FEFA9E0000-memory.dmp

    Filesize

    64KB

  • memory/2160-32-0x000007FEF5BF0000-0x000007FEF5C07000-memory.dmp

    Filesize

    92KB

  • memory/2160-34-0x000007FEF4520000-0x000007FEF454F000-memory.dmp

    Filesize

    188KB

  • memory/2160-35-0x000007FEF5BD0000-0x000007FEF5BE1000-memory.dmp

    Filesize

    68KB

  • memory/2160-36-0x000007FEF4500000-0x000007FEF4516000-memory.dmp

    Filesize

    88KB

  • memory/2160-37-0x000007FEF4430000-0x000007FEF44F5000-memory.dmp

    Filesize

    788KB

  • memory/2160-38-0x000007FEF4410000-0x000007FEF4425000-memory.dmp

    Filesize

    84KB

  • memory/2160-39-0x000007FEF43D0000-0x000007FEF43E1000-memory.dmp

    Filesize

    68KB

  • memory/2160-40-0x000007FEF43B0000-0x000007FEF43C2000-memory.dmp

    Filesize

    72KB

  • memory/2160-41-0x000007FEF4230000-0x000007FEF43AA000-memory.dmp

    Filesize

    1.5MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.