Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1751s
  • max time network
    1638s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2024, 22:30

General

  • Target

    IMG_7726.mov

  • Size

    309.8MB

  • MD5

    20ecc3d01299f85d30664993200a6a49

  • SHA1

    d64c6f56e250a2fdb62ecd98d6019fbbbe08d1f8

  • SHA256

    0eff8cb2392a8c88752dd630e9b73706d5457098c9aa84ccd46cf3c88d5e77fa

  • SHA512

    ba3ba0f66b4fc8c2301a70ad0712dd5b2817a4ef29a4354a17c48af6dd58fa63132546a6362ac84e6399e13de610f815f7aebcadabc1f84dbec676c76b32660d

  • SSDEEP

    6291456:ml1pGtvIJSAiLpcSjhSzWBu81m054LFwE2eVXrOWoJBV:mxJXi5hSku81mwEBRHoDV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 29 IoCs
  • Suspicious use of SendNotifyMessage 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\IMG_7726.mov"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2912-5-0x000000013F470000-0x000000013F568000-memory.dmp

    Filesize

    992KB

  • memory/2912-7-0x000007FEF64A0000-0x000007FEF6754000-memory.dmp

    Filesize

    2.7MB

  • memory/2912-6-0x000007FEF7CF0000-0x000007FEF7D24000-memory.dmp

    Filesize

    208KB

  • memory/2912-8-0x000007FEFBAB0000-0x000007FEFBAC8000-memory.dmp

    Filesize

    96KB

  • memory/2912-9-0x000007FEF7F90000-0x000007FEF7FA7000-memory.dmp

    Filesize

    92KB

  • memory/2912-11-0x000007FEF7CB0000-0x000007FEF7CC7000-memory.dmp

    Filesize

    92KB

  • memory/2912-13-0x000007FEF7170000-0x000007FEF718D000-memory.dmp

    Filesize

    116KB

  • memory/2912-14-0x000007FEF62A0000-0x000007FEF64A0000-memory.dmp

    Filesize

    2.0MB

  • memory/2912-18-0x000007FEF6C60000-0x000007FEF6C78000-memory.dmp

    Filesize

    96KB

  • memory/2912-19-0x000007FEF6BC0000-0x000007FEF6BD1000-memory.dmp

    Filesize

    68KB

  • memory/2912-17-0x000007FEF7120000-0x000007FEF7141000-memory.dmp

    Filesize

    132KB

  • memory/2912-20-0x000007FEF6BA0000-0x000007FEF6BB1000-memory.dmp

    Filesize

    68KB

  • memory/2912-16-0x000007FEF6C80000-0x000007FEF6CBF000-memory.dmp

    Filesize

    252KB

  • memory/2912-21-0x000007FEF6B80000-0x000007FEF6B91000-memory.dmp

    Filesize

    68KB

  • memory/2912-23-0x000007FEF6B40000-0x000007FEF6B51000-memory.dmp

    Filesize

    68KB

  • memory/2912-25-0x000007FEF6AF0000-0x000007FEF6B20000-memory.dmp

    Filesize

    192KB

  • memory/2912-24-0x000007FEF6B20000-0x000007FEF6B38000-memory.dmp

    Filesize

    96KB

  • memory/2912-22-0x000007FEF6B60000-0x000007FEF6B7B000-memory.dmp

    Filesize

    108KB

  • memory/2912-15-0x000007FEF7150000-0x000007FEF7161000-memory.dmp

    Filesize

    68KB

  • memory/2912-12-0x000007FEF7190000-0x000007FEF71A1000-memory.dmp

    Filesize

    68KB

  • memory/2912-10-0x000007FEF7D60000-0x000007FEF7D71000-memory.dmp

    Filesize

    68KB

  • memory/2912-27-0x000007FEF5180000-0x000007FEF51E7000-memory.dmp

    Filesize

    412KB

  • memory/2912-28-0x000007FEF5110000-0x000007FEF517F000-memory.dmp

    Filesize

    444KB

  • memory/2912-29-0x000007FEF6AD0000-0x000007FEF6AE1000-memory.dmp

    Filesize

    68KB

  • memory/2912-26-0x000007FEF51F0000-0x000007FEF629B000-memory.dmp

    Filesize

    16.7MB

  • memory/2912-30-0x000007FEF50B0000-0x000007FEF5106000-memory.dmp

    Filesize

    344KB

  • memory/2912-31-0x000007FEF4F30000-0x000007FEF50A8000-memory.dmp

    Filesize

    1.5MB

  • memory/2912-32-0x000007FEF4F10000-0x000007FEF4F27000-memory.dmp

    Filesize

    92KB

  • memory/2912-33-0x000007FEF7D50000-0x000007FEF7D60000-memory.dmp

    Filesize

    64KB

  • memory/2912-34-0x000007FEF4EE0000-0x000007FEF4F0F000-memory.dmp

    Filesize

    188KB

  • memory/2912-36-0x000007FEF4EA0000-0x000007FEF4EB6000-memory.dmp

    Filesize

    88KB

  • memory/2912-35-0x000007FEF4EC0000-0x000007FEF4ED1000-memory.dmp

    Filesize

    68KB

  • memory/2912-37-0x000007FEF4DD0000-0x000007FEF4E95000-memory.dmp

    Filesize

    788KB

  • memory/2912-38-0x000007FEF4D50000-0x000007FEF4DC5000-memory.dmp

    Filesize

    468KB

  • memory/2912-39-0x000007FEF4CE0000-0x000007FEF4D42000-memory.dmp

    Filesize

    392KB

  • memory/2912-40-0x000007FEF4C70000-0x000007FEF4CDD000-memory.dmp

    Filesize

    436KB

  • memory/2912-42-0x000007FEF4C30000-0x000007FEF4C44000-memory.dmp

    Filesize

    80KB

  • memory/2912-43-0x000007FEF4BE0000-0x000007FEF4C30000-memory.dmp

    Filesize

    320KB

  • memory/2912-45-0x000007FEF4A50000-0x000007FEF4A62000-memory.dmp

    Filesize

    72KB

  • memory/2912-44-0x000007FEF4A70000-0x000007FEF4BE0000-memory.dmp

    Filesize

    1.4MB

  • memory/2912-41-0x000007FEF4C50000-0x000007FEF4C63000-memory.dmp

    Filesize

    76KB

  • memory/2912-46-0x000007FEF4A00000-0x000007FEF4A42000-memory.dmp

    Filesize

    264KB

  • memory/2912-48-0x000007FEF4840000-0x000007FEF49AB000-memory.dmp

    Filesize

    1.4MB

  • memory/2912-49-0x000007FEF47E0000-0x000007FEF4837000-memory.dmp

    Filesize

    348KB

  • memory/2912-47-0x000007FEF49B0000-0x000007FEF49FC000-memory.dmp

    Filesize

    304KB

  • memory/2912-50-0x000007FEF4590000-0x000007FEF47DB000-memory.dmp

    Filesize

    2.3MB

  • memory/2912-52-0x000007FEF2DC0000-0x000007FEF2DD5000-memory.dmp

    Filesize

    84KB

  • memory/2912-54-0x000007FEF2D60000-0x000007FEF2D72000-memory.dmp

    Filesize

    72KB

  • memory/2912-55-0x000007FEF2BE0000-0x000007FEF2D5A000-memory.dmp

    Filesize

    1.5MB

  • memory/2912-68-0x000007FEF2740000-0x000007FEF2752000-memory.dmp

    Filesize

    72KB

  • memory/2912-67-0x000007FEF2760000-0x000007FEF2774000-memory.dmp

    Filesize

    80KB

  • memory/2912-66-0x000007FEF2780000-0x000007FEF2793000-memory.dmp

    Filesize

    76KB

  • memory/2912-65-0x000007FEF27A0000-0x000007FEF27B5000-memory.dmp

    Filesize

    84KB

  • memory/2912-64-0x000007FEF27C0000-0x000007FEF27D2000-memory.dmp

    Filesize

    72KB

  • memory/2912-63-0x000007FEF27E0000-0x000007FEF27FB000-memory.dmp

    Filesize

    108KB

  • memory/2912-62-0x000007FEF2800000-0x000007FEF2813000-memory.dmp

    Filesize

    76KB

  • memory/2912-61-0x000007FEF2820000-0x000007FEF284A000-memory.dmp

    Filesize

    168KB

  • memory/2912-60-0x000007FEF2850000-0x000007FEF2944000-memory.dmp

    Filesize

    976KB

  • memory/2912-59-0x000007FEF2950000-0x000007FEF2963000-memory.dmp

    Filesize

    76KB

  • memory/2912-58-0x000007FEF2970000-0x000007FEF2993000-memory.dmp

    Filesize

    140KB

  • memory/2912-57-0x000007FEF29A0000-0x000007FEF29B5000-memory.dmp

    Filesize

    84KB

  • memory/2912-56-0x000007FEF29C0000-0x000007FEF2BDD000-memory.dmp

    Filesize

    2.1MB

  • memory/2912-53-0x000007FEF2D80000-0x000007FEF2D91000-memory.dmp

    Filesize

    68KB

  • memory/2912-51-0x000007FEF2DE0000-0x000007FEF4590000-memory.dmp

    Filesize

    23.7MB