Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
02/05/2024, 19:13
240502-xw2mzseb6s 802/05/2024, 19:06
240502-xr2gesea9w 802/05/2024, 19:03
240502-xqgqmaea7w 1002/05/2024, 18:59
240502-xndwysga69 6Analysis
-
max time kernel
141s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
02/05/2024, 18:59
Static task
static1
Behavioral task
behavioral1
Sample
بهجت صابر - من ميدان الكسميات ..mp4
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
بهجت صابر - من ميدان الكسميات ..mp4
Resource
win10v2004-20240426-en
General
-
Target
بهجت صابر - من ميدان الكسميات ..mp4
-
Size
1.9MB
-
MD5
60134762845141c1071ba1134fa5d712
-
SHA1
5f93f2ac13f1d2f4de8418b768b7953709c643a6
-
SHA256
8f76628c5258074c8a43a644bab240c1b6b5d73851831580b328e4f5bec90687
-
SHA512
2a6951e6601d515c1d84f3d5d81d27866b3df1999f65b341ca1021521a8584182dabfbac342cc68ef159a6e41c42459d5f3d479ed5653f465d51cf7a8391f33d
-
SSDEEP
49152:54lDV2ACQ8GSpLt9ndqqgtqgtaKOWOHxomZjmQ8Z3:6lDV2ACJpvndPEqghOW0NjmJZ
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2648 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2648 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2648 vlc.exe Token: SeIncBasePriorityPrivilege 2648 vlc.exe -
Suspicious use of FindShellTrayWindow 29 IoCs
pid Process 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe -
Suspicious use of SendNotifyMessage 9 IoCs
pid Process 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe 2648 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2648 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\بهجت صابر - من ميدان الكسميات ..mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2648