Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    57s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/01/2024, 04:22

General

  • Target

    Jennifer's Body.mp4

  • Size

    3.7MB

  • MD5

    7d65f2b8870e21f1edb9d42f1053dbc4

  • SHA1

    639997a3ead06b6366bbf2d921a9e544aad7f3c9

  • SHA256

    1de7980c6357715d40cb91c7fb3e2cd47e05d2d220381f7867e781b582a14e2c

  • SHA512

    163cb442597449209a37e14d33edf9d3954e5a17835692faf457d43b074c2186503155db0a1fc7d438602179fba1dc4f3649f06bde5ea7d9081877baaa9815db

  • SSDEEP

    98304:zqtPt04FRSRv84gWxD1bHqA0tFtw4jKMOrz4uBEGAUmyxEa1aWML8NQ:yedZ5NNRdvI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 13 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Jennifer's Body.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2288
  • C:\Windows\system32\SndVol.exe
    SndVol.exe -f 46072989 24838
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SendNotifyMessage
    PID:2488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2288-7-0x000000013FDA0000-0x000000013FE98000-memory.dmp

    Filesize

    992KB

  • memory/2288-8-0x000007FEF77F0000-0x000007FEF7824000-memory.dmp

    Filesize

    208KB

  • memory/2288-9-0x000007FEF5D10000-0x000007FEF5FC4000-memory.dmp

    Filesize

    2.7MB

  • memory/2288-11-0x000007FEF7890000-0x000007FEF78A7000-memory.dmp

    Filesize

    92KB

  • memory/2288-12-0x000007FEF77D0000-0x000007FEF77E1000-memory.dmp

    Filesize

    68KB

  • memory/2288-13-0x000007FEF77B0000-0x000007FEF77C7000-memory.dmp

    Filesize

    92KB

  • memory/2288-15-0x000007FEF7610000-0x000007FEF762D000-memory.dmp

    Filesize

    116KB

  • memory/2288-16-0x000007FEF6AD0000-0x000007FEF6AE1000-memory.dmp

    Filesize

    68KB

  • memory/2288-14-0x000007FEF7790000-0x000007FEF77A1000-memory.dmp

    Filesize

    68KB

  • memory/2288-10-0x000007FEFB4E0000-0x000007FEFB4F8000-memory.dmp

    Filesize

    96KB

  • memory/2288-17-0x000007FEF5B10000-0x000007FEF5D10000-memory.dmp

    Filesize

    2.0MB

  • memory/2288-18-0x000007FEF4A60000-0x000007FEF5B0B000-memory.dmp

    Filesize

    16.7MB

  • memory/2288-19-0x000007FEF6A90000-0x000007FEF6ACF000-memory.dmp

    Filesize

    252KB

  • memory/2288-20-0x000007FEF6A60000-0x000007FEF6A81000-memory.dmp

    Filesize

    132KB

  • memory/2288-22-0x000007FEF6610000-0x000007FEF6621000-memory.dmp

    Filesize

    68KB

  • memory/2288-24-0x000007FEF6430000-0x000007FEF6441000-memory.dmp

    Filesize

    68KB

  • memory/2288-23-0x000007FEF65F0000-0x000007FEF6601000-memory.dmp

    Filesize

    68KB

  • memory/2288-26-0x000007FEF63F0000-0x000007FEF6401000-memory.dmp

    Filesize

    68KB

  • memory/2288-27-0x000007FEF63D0000-0x000007FEF63E8000-memory.dmp

    Filesize

    96KB

  • memory/2288-29-0x000007FEF49F0000-0x000007FEF4A57000-memory.dmp

    Filesize

    412KB

  • memory/2288-28-0x000007FEF63A0000-0x000007FEF63D0000-memory.dmp

    Filesize

    192KB

  • memory/2288-25-0x000007FEF6410000-0x000007FEF642B000-memory.dmp

    Filesize

    108KB

  • memory/2288-21-0x000007FEF6630000-0x000007FEF6648000-memory.dmp

    Filesize

    96KB

  • memory/2288-30-0x000007FEF4980000-0x000007FEF49EF000-memory.dmp

    Filesize

    444KB

  • memory/2288-31-0x000007FEF6380000-0x000007FEF6391000-memory.dmp

    Filesize

    68KB

  • memory/2288-32-0x000007FEF4920000-0x000007FEF4976000-memory.dmp

    Filesize

    344KB

  • memory/2288-33-0x000007FEF47A0000-0x000007FEF4918000-memory.dmp

    Filesize

    1.5MB

  • memory/2288-34-0x000007FEF6360000-0x000007FEF6377000-memory.dmp

    Filesize

    92KB

  • memory/2288-35-0x000007FEF4630000-0x000007FEF47A0000-memory.dmp

    Filesize

    1.4MB

  • memory/2288-37-0x000007FEF45E0000-0x000007FEF4622000-memory.dmp

    Filesize

    264KB

  • memory/2288-38-0x000007FEF4590000-0x000007FEF45DC000-memory.dmp

    Filesize

    304KB

  • memory/2288-36-0x000007FEF6340000-0x000007FEF6352000-memory.dmp

    Filesize

    72KB

  • memory/2288-39-0x000007FEF4420000-0x000007FEF458B000-memory.dmp

    Filesize

    1.4MB

  • memory/2288-40-0x000007FEF43C0000-0x000007FEF4417000-memory.dmp

    Filesize

    348KB

  • memory/2288-41-0x000007FEF4170000-0x000007FEF43BB000-memory.dmp

    Filesize

    2.3MB

  • memory/2288-42-0x000007FEF29C0000-0x000007FEF4170000-memory.dmp

    Filesize

    23.7MB

  • memory/2288-43-0x000007FEF7880000-0x000007FEF7890000-memory.dmp

    Filesize

    64KB

  • memory/2288-44-0x000007FEF2990000-0x000007FEF29BF000-memory.dmp

    Filesize

    188KB

  • memory/2288-45-0x000007FEF2970000-0x000007FEF2981000-memory.dmp

    Filesize

    68KB

  • memory/2288-46-0x000007FEF2950000-0x000007FEF2966000-memory.dmp

    Filesize

    88KB

  • memory/2288-47-0x000007FEF2880000-0x000007FEF2945000-memory.dmp

    Filesize

    788KB

  • memory/2288-48-0x000007FEF2800000-0x000007FEF2875000-memory.dmp

    Filesize

    468KB

  • memory/2288-49-0x000007FEF2790000-0x000007FEF27F2000-memory.dmp

    Filesize

    392KB

  • memory/2288-50-0x000007FEF2720000-0x000007FEF278D000-memory.dmp

    Filesize

    436KB

  • memory/2288-51-0x000007FEF2700000-0x000007FEF2713000-memory.dmp

    Filesize

    76KB

  • memory/2288-52-0x000007FEF26E0000-0x000007FEF26F4000-memory.dmp

    Filesize

    80KB

  • memory/2288-54-0x000007FEF2670000-0x000007FEF2685000-memory.dmp

    Filesize

    84KB

  • memory/2288-53-0x000007FEF2690000-0x000007FEF26E0000-memory.dmp

    Filesize

    320KB

  • memory/2288-55-0x000007FEF2450000-0x000007FEF266D000-memory.dmp

    Filesize

    2.1MB

  • memory/2288-56-0x000007FEF2410000-0x000007FEF2425000-memory.dmp

    Filesize

    84KB

  • memory/2288-59-0x000007FEF23A0000-0x000007FEF23C3000-memory.dmp

    Filesize

    140KB

  • memory/2288-58-0x000007FEF23D0000-0x000007FEF23E2000-memory.dmp

    Filesize

    72KB

  • memory/2288-57-0x000007FEF23F0000-0x000007FEF2401000-memory.dmp

    Filesize

    68KB

  • memory/2288-60-0x000007FEF2220000-0x000007FEF239A000-memory.dmp

    Filesize

    1.5MB

  • memory/2288-61-0x000007FEF2200000-0x000007FEF2213000-memory.dmp

    Filesize

    76KB

  • memory/2288-62-0x000007FEF2100000-0x000007FEF21F4000-memory.dmp

    Filesize

    976KB

  • memory/2288-63-0x000007FEF20D0000-0x000007FEF20FA000-memory.dmp

    Filesize

    168KB

  • memory/2288-64-0x000007FEF20B0000-0x000007FEF20C3000-memory.dmp

    Filesize

    76KB

  • memory/2288-65-0x000007FEF2090000-0x000007FEF20AB000-memory.dmp

    Filesize

    108KB

  • memory/2288-66-0x000007FEF2070000-0x000007FEF2082000-memory.dmp

    Filesize

    72KB

  • memory/2288-67-0x000007FEF2050000-0x000007FEF2065000-memory.dmp

    Filesize

    84KB

  • memory/2288-69-0x000007FEF2010000-0x000007FEF2024000-memory.dmp

    Filesize

    80KB

  • memory/2288-70-0x000007FEF1FF0000-0x000007FEF2002000-memory.dmp

    Filesize

    72KB

  • memory/2288-68-0x000007FEF2030000-0x000007FEF2043000-memory.dmp

    Filesize

    76KB

  • memory/2488-253-0x0000000000300000-0x0000000000301000-memory.dmp

    Filesize

    4KB

  • memory/2488-254-0x0000000000300000-0x0000000000301000-memory.dmp

    Filesize

    4KB