Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

02/05/2024, 19:13

240502-xw2mzseb6s 8

02/05/2024, 19:06

240502-xr2gesea9w 8

02/05/2024, 19:03

240502-xqgqmaea7w 10

02/05/2024, 18:59

240502-xndwysga69 6

Analysis

  • max time kernel
    141s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/05/2024, 18:59

General

  • Target

    بهجت صابر - من ميدان الكسميات ..mp4

  • Size

    1.9MB

  • MD5

    60134762845141c1071ba1134fa5d712

  • SHA1

    5f93f2ac13f1d2f4de8418b768b7953709c643a6

  • SHA256

    8f76628c5258074c8a43a644bab240c1b6b5d73851831580b328e4f5bec90687

  • SHA512

    2a6951e6601d515c1d84f3d5d81d27866b3df1999f65b341ca1021521a8584182dabfbac342cc68ef159a6e41c42459d5f3d479ed5653f465d51cf7a8391f33d

  • SSDEEP

    49152:54lDV2ACQ8GSpLt9ndqqgtqgtaKOWOHxomZjmQ8Z3:6lDV2ACJpvndPEqghOW0NjmJZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 29 IoCs
  • Suspicious use of SendNotifyMessage 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\بهجت صابر - من ميدان الكسميات ..mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2648-5-0x000000013F500000-0x000000013F5F8000-memory.dmp

    Filesize

    992KB

  • memory/2648-6-0x000007FEFB3B0000-0x000007FEFB3E4000-memory.dmp

    Filesize

    208KB

  • memory/2648-9-0x000007FEFB4C0000-0x000007FEFB4D7000-memory.dmp

    Filesize

    92KB

  • memory/2648-11-0x000007FEF79B0000-0x000007FEF79C7000-memory.dmp

    Filesize

    92KB

  • memory/2648-10-0x000007FEF79D0000-0x000007FEF79E1000-memory.dmp

    Filesize

    68KB

  • memory/2648-8-0x000007FEFB7D0000-0x000007FEFB7E8000-memory.dmp

    Filesize

    96KB

  • memory/2648-12-0x000007FEF7910000-0x000007FEF7921000-memory.dmp

    Filesize

    68KB

  • memory/2648-13-0x000007FEF78E0000-0x000007FEF78FD000-memory.dmp

    Filesize

    116KB

  • memory/2648-7-0x000007FEF61A0000-0x000007FEF6454000-memory.dmp

    Filesize

    2.7MB

  • memory/2648-14-0x000007FEF5FA0000-0x000007FEF61A0000-memory.dmp

    Filesize

    2.0MB

  • memory/2648-22-0x000007FEF6DD0000-0x000007FEF6DEB000-memory.dmp

    Filesize

    108KB

  • memory/2648-20-0x000007FEF6E10000-0x000007FEF6E21000-memory.dmp

    Filesize

    68KB

  • memory/2648-19-0x000007FEF6E30000-0x000007FEF6E41000-memory.dmp

    Filesize

    68KB

  • memory/2648-17-0x000007FEF6E70000-0x000007FEF6E91000-memory.dmp

    Filesize

    132KB

  • memory/2648-21-0x000007FEF6DF0000-0x000007FEF6E01000-memory.dmp

    Filesize

    68KB

  • memory/2648-16-0x000007FEF6EA0000-0x000007FEF6EDF000-memory.dmp

    Filesize

    252KB

  • memory/2648-18-0x000007FEF6E50000-0x000007FEF6E68000-memory.dmp

    Filesize

    96KB

  • memory/2648-15-0x000007FEF78C0000-0x000007FEF78D1000-memory.dmp

    Filesize

    68KB

  • memory/2648-27-0x000007FEF6890000-0x000007FEF68F7000-memory.dmp

    Filesize

    412KB

  • memory/2648-26-0x000007FEF6D60000-0x000007FEF6D90000-memory.dmp

    Filesize

    192KB

  • memory/2648-30-0x000007FEF4E90000-0x000007FEF4EE6000-memory.dmp

    Filesize

    344KB

  • memory/2648-35-0x000007FEF4B50000-0x000007FEF4B92000-memory.dmp

    Filesize

    264KB

  • memory/2648-34-0x000007FEF6800000-0x000007FEF6812000-memory.dmp

    Filesize

    72KB

  • memory/2648-33-0x000007FEF4BA0000-0x000007FEF4D10000-memory.dmp

    Filesize

    1.4MB

  • memory/2648-37-0x000007FEF4990000-0x000007FEF4AFB000-memory.dmp

    Filesize

    1.4MB

  • memory/2648-38-0x000007FEF4930000-0x000007FEF4987000-memory.dmp

    Filesize

    348KB

  • memory/2648-23-0x000007FEF4EF0000-0x000007FEF5F9B000-memory.dmp

    Filesize

    16.7MB

  • memory/2648-36-0x000007FEF4B00000-0x000007FEF4B4C000-memory.dmp

    Filesize

    304KB

  • memory/2648-32-0x000007FEF6D20000-0x000007FEF6D37000-memory.dmp

    Filesize

    92KB

  • memory/2648-31-0x000007FEF4D10000-0x000007FEF4E88000-memory.dmp

    Filesize

    1.5MB

  • memory/2648-29-0x000007FEF6D40000-0x000007FEF6D51000-memory.dmp

    Filesize

    68KB

  • memory/2648-28-0x000007FEF6820000-0x000007FEF688F000-memory.dmp

    Filesize

    444KB

  • memory/2648-25-0x000007FEF6D90000-0x000007FEF6DA8000-memory.dmp

    Filesize

    96KB

  • memory/2648-40-0x000007FEFB8A0000-0x000007FEFB8B0000-memory.dmp

    Filesize

    64KB

  • memory/2648-43-0x000007FEF2EF0000-0x000007FEF2F06000-memory.dmp

    Filesize

    88KB

  • memory/2648-42-0x000007FEF2F10000-0x000007FEF2F21000-memory.dmp

    Filesize

    68KB

  • memory/2648-39-0x000007FEF46E0000-0x000007FEF492B000-memory.dmp

    Filesize

    2.3MB

  • memory/2648-41-0x000007FEF67D0000-0x000007FEF67FF000-memory.dmp

    Filesize

    188KB

  • memory/2648-46-0x000007FEF2D30000-0x000007FEF2D92000-memory.dmp

    Filesize

    392KB

  • memory/2648-51-0x000007FEF2C10000-0x000007FEF2C25000-memory.dmp

    Filesize

    84KB

  • memory/2648-50-0x000007FEF2C30000-0x000007FEF2C80000-memory.dmp

    Filesize

    320KB

  • memory/2648-49-0x000007FEF2C80000-0x000007FEF2C94000-memory.dmp

    Filesize

    80KB

  • memory/2648-48-0x000007FEF2CA0000-0x000007FEF2CB3000-memory.dmp

    Filesize

    76KB

  • memory/2648-47-0x000007FEF2CC0000-0x000007FEF2D2D000-memory.dmp

    Filesize

    436KB

  • memory/2648-45-0x000007FEF2DA0000-0x000007FEF2E15000-memory.dmp

    Filesize

    468KB

  • memory/2648-55-0x000007FEF2980000-0x000007FEF2993000-memory.dmp

    Filesize

    76KB

  • memory/2648-60-0x000007FEF2420000-0x000007FEF247D000-memory.dmp

    Filesize

    372KB

  • memory/2648-63-0x000007FEF21D0000-0x000007FEF21E1000-memory.dmp

    Filesize

    68KB

  • memory/2648-62-0x000007FEF2340000-0x000007FEF23C1000-memory.dmp

    Filesize

    516KB

  • memory/2648-65-0x000007FEF19D0000-0x000007FEF1A13000-memory.dmp

    Filesize

    268KB

  • memory/2648-66-0x000007FEF1990000-0x000007FEF19C4000-memory.dmp

    Filesize

    208KB

  • memory/2648-64-0x000007FEF1A20000-0x000007FEF1A6E000-memory.dmp

    Filesize

    312KB

  • memory/2648-61-0x000007FEF23D0000-0x000007FEF2417000-memory.dmp

    Filesize

    284KB

  • memory/2648-56-0x000007FEF2880000-0x000007FEF2974000-memory.dmp

    Filesize

    976KB

  • memory/2648-59-0x000007FEF2480000-0x000007FEF2491000-memory.dmp

    Filesize

    68KB

  • memory/2648-58-0x000007FEF2810000-0x000007FEF283A000-memory.dmp

    Filesize

    168KB

  • memory/2648-57-0x000007FEF2840000-0x000007FEF2851000-memory.dmp

    Filesize

    68KB

  • memory/2648-52-0x000007FEF29F0000-0x000007FEF2C0D000-memory.dmp

    Filesize

    2.1MB

  • memory/2648-54-0x000007FEF29A0000-0x000007FEF29C3000-memory.dmp

    Filesize

    140KB

  • memory/2648-53-0x000007FEF29D0000-0x000007FEF29E5000-memory.dmp

    Filesize

    84KB

  • memory/2648-44-0x000007FEF2E20000-0x000007FEF2EE5000-memory.dmp

    Filesize

    788KB

  • memory/2648-24-0x000007FEF6DB0000-0x000007FEF6DC1000-memory.dmp

    Filesize

    68KB