Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/02/2024, 02:36

General

  • Target

    Ilmari Hakkola Bad Piggies Theme.mp3

  • Size

    2.5MB

  • MD5

    c3f72ed946f76cbd1ef6bea6da4665fc

  • SHA1

    c8f610978bece603adc1b229372b43fe999d03ad

  • SHA256

    d7c9e8e299902f54be1d4dda71a26cd60b873c8e9cb7679abb8eb3e59b456a53

  • SHA512

    948e9be0a93a4fa1bead76780d1037c26695401595c8321aa6a3081fd0473a33723149d7ee5a7fe41ded07f1a124bb18986e1293944c76d98f9e937ef65706a5

  • SSDEEP

    49152:59s7ajHiX5IWM3wpyihWRtWClzmE59W4Nc+P4PJyhb59F7xtD7:59Jjv3wQRtjlzB59j6qhb5bD7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Ilmari Hakkola Bad Piggies Theme.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2464-5-0x000000013FD30000-0x000000013FE28000-memory.dmp

    Filesize

    992KB

  • memory/2464-6-0x000007FEF7440000-0x000007FEF7474000-memory.dmp

    Filesize

    208KB

  • memory/2464-7-0x000007FEF5A30000-0x000007FEF5CE4000-memory.dmp

    Filesize

    2.7MB

  • memory/2464-8-0x000007FEFB330000-0x000007FEFB348000-memory.dmp

    Filesize

    96KB

  • memory/2464-10-0x000007FEF6DB0000-0x000007FEF6DC1000-memory.dmp

    Filesize

    68KB

  • memory/2464-9-0x000007FEF74B0000-0x000007FEF74C7000-memory.dmp

    Filesize

    92KB

  • memory/2464-11-0x000007FEF66E0000-0x000007FEF66F7000-memory.dmp

    Filesize

    92KB

  • memory/2464-14-0x000007FEF62A0000-0x000007FEF62B1000-memory.dmp

    Filesize

    68KB

  • memory/2464-13-0x000007FEF66A0000-0x000007FEF66BD000-memory.dmp

    Filesize

    116KB

  • memory/2464-12-0x000007FEF66C0000-0x000007FEF66D1000-memory.dmp

    Filesize

    68KB

  • memory/2464-15-0x000007FEF4980000-0x000007FEF5A2B000-memory.dmp

    Filesize

    16.7MB

  • memory/2464-18-0x000007FEF61E0000-0x000007FEF6201000-memory.dmp

    Filesize

    132KB

  • memory/2464-30-0x000007FEF4660000-0x000007FEF4677000-memory.dmp

    Filesize

    92KB

  • memory/2464-29-0x000007FEF4680000-0x000007FEF4691000-memory.dmp

    Filesize

    68KB

  • memory/2464-28-0x000007FEF46A0000-0x000007FEF470F000-memory.dmp

    Filesize

    444KB

  • memory/2464-31-0x000007FEF4600000-0x000007FEF4656000-memory.dmp

    Filesize

    344KB

  • memory/2464-27-0x000007FEF4710000-0x000007FEF4777000-memory.dmp

    Filesize

    412KB

  • memory/2464-26-0x000007FEF6060000-0x000007FEF6090000-memory.dmp

    Filesize

    192KB

  • memory/2464-34-0x000007FEF7570000-0x000007FEF7580000-memory.dmp

    Filesize

    64KB

  • memory/2464-33-0x000007FEF4460000-0x000007FEF4477000-memory.dmp

    Filesize

    92KB

  • memory/2464-32-0x000007FEF4480000-0x000007FEF45F8000-memory.dmp

    Filesize

    1.5MB

  • memory/2464-25-0x000007FEF6090000-0x000007FEF60A8000-memory.dmp

    Filesize

    96KB

  • memory/2464-24-0x000007FEF60B0000-0x000007FEF60C1000-memory.dmp

    Filesize

    68KB

  • memory/2464-35-0x000007FEF4430000-0x000007FEF445F000-memory.dmp

    Filesize

    188KB

  • memory/2464-23-0x000007FEF60D0000-0x000007FEF60EB000-memory.dmp

    Filesize

    108KB

  • memory/2464-39-0x000007FEF42A0000-0x000007FEF4315000-memory.dmp

    Filesize

    468KB

  • memory/2464-42-0x000007FEF41A0000-0x000007FEF41B3000-memory.dmp

    Filesize

    76KB

  • memory/2464-47-0x000007FEF40B0000-0x000007FEF40C2000-memory.dmp

    Filesize

    72KB

  • memory/2464-46-0x000007FEF40D0000-0x000007FEF40E1000-memory.dmp

    Filesize

    68KB

  • memory/2464-45-0x000007FEF4110000-0x000007FEF4125000-memory.dmp

    Filesize

    84KB

  • memory/2464-48-0x000007FEF3F30000-0x000007FEF40AA000-memory.dmp

    Filesize

    1.5MB

  • memory/2464-44-0x000007FEF4130000-0x000007FEF4180000-memory.dmp

    Filesize

    320KB

  • memory/2464-43-0x000007FEF4180000-0x000007FEF4194000-memory.dmp

    Filesize

    80KB

  • memory/2464-41-0x000007FEF41C0000-0x000007FEF422D000-memory.dmp

    Filesize

    436KB

  • memory/2464-40-0x000007FEF4230000-0x000007FEF4292000-memory.dmp

    Filesize

    392KB

  • memory/2464-38-0x000007FEF4320000-0x000007FEF43E5000-memory.dmp

    Filesize

    788KB

  • memory/2464-37-0x000007FEF43F0000-0x000007FEF4406000-memory.dmp

    Filesize

    88KB

  • memory/2464-36-0x000007FEF4410000-0x000007FEF4421000-memory.dmp

    Filesize

    68KB

  • memory/2464-22-0x000007FEF60F0000-0x000007FEF6101000-memory.dmp

    Filesize

    68KB

  • memory/2464-21-0x000007FEF6110000-0x000007FEF6121000-memory.dmp

    Filesize

    68KB

  • memory/2464-20-0x000007FEF6130000-0x000007FEF6141000-memory.dmp

    Filesize

    68KB

  • memory/2464-19-0x000007FEF6150000-0x000007FEF6168000-memory.dmp

    Filesize

    96KB

  • memory/2464-17-0x000007FEF6210000-0x000007FEF624F000-memory.dmp

    Filesize

    252KB

  • memory/2464-16-0x000007FEF4780000-0x000007FEF4980000-memory.dmp

    Filesize

    2.0MB