Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
01/02/2024, 04:26
240201-e2nzzabbf8 6Analysis
-
max time kernel
61s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
01/02/2024, 04:26
Static task
static1
Behavioral task
behavioral1
Sample
bruh-sound-effect-2-37927.mp3
Resource
win7-20231215-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
bruh-sound-effect-2-37927.mp3
Resource
win10v2004-20231222-en
3 signatures
150 seconds
General
-
Target
bruh-sound-effect-2-37927.mp3
-
Size
24KB
-
MD5
59edacf48c7ef6c9076732e03a1ecc09
-
SHA1
950f0cb1e5500abb5eda3f119543e2f3b00f5fc6
-
SHA256
f4751b779204c317da5f1e86d1465bf89edb30aee9e6247679e512a5501ee04a
-
SHA512
11fd8b7de7a65dafb6fe815eaaa55cafd2b61b6213122f9de5720508fe0de441c57bf3f2b51424aea6d9bb5e1426a11eee70db4762ebb837b3403331698f4565
-
SSDEEP
192:Tsagp5IZCsWAi/UjTo/1U9dJbx/BrMfet63vzDn+HiSyDciF6KzXJBCX:XA5IZC08/1An/xMf2AD+nyDciF6K1K
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3032 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3032 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 3032 vlc.exe Token: SeIncBasePriorityPrivilege 3032 vlc.exe -
Suspicious use of FindShellTrayWindow 9 IoCs
pid Process 3032 vlc.exe 3032 vlc.exe 3032 vlc.exe 3032 vlc.exe 3032 vlc.exe 3032 vlc.exe 3032 vlc.exe 3032 vlc.exe 3032 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 3032 vlc.exe 3032 vlc.exe 3032 vlc.exe 3032 vlc.exe 3032 vlc.exe 3032 vlc.exe 3032 vlc.exe 3032 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3032 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\bruh-sound-effect-2-37927.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3032