Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
57s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
14/01/2024, 04:22
Static task
static1
Behavioral task
behavioral1
Sample
Jennifer's Body.mp4
Resource
win7-20231215-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Jennifer's Body.mp4
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
Jennifer's Body.mp4
-
Size
3.7MB
-
MD5
7d65f2b8870e21f1edb9d42f1053dbc4
-
SHA1
639997a3ead06b6366bbf2d921a9e544aad7f3c9
-
SHA256
1de7980c6357715d40cb91c7fb3e2cd47e05d2d220381f7867e781b582a14e2c
-
SHA512
163cb442597449209a37e14d33edf9d3954e5a17835692faf457d43b074c2186503155db0a1fc7d438602179fba1dc4f3649f06bde5ea7d9081877baaa9815db
-
SSDEEP
98304:zqtPt04FRSRv84gWxD1bHqA0tFtw4jKMOrz4uBEGAUmyxEa1aWML8NQ:yedZ5NNRdvI
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2288 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 2 IoCs
pid Process 2288 vlc.exe 2488 SndVol.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2288 vlc.exe Token: SeIncBasePriorityPrivilege 2288 vlc.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe -
Suspicious use of SendNotifyMessage 13 IoCs
pid Process 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2488 SndVol.exe 2488 SndVol.exe 2488 SndVol.exe 2488 SndVol.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe 2288 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2288 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Jennifer's Body.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2288
-
C:\Windows\system32\SndVol.exeSndVol.exe -f 46072989 248381⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SendNotifyMessage
PID:2488