Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 21:58

General

  • Target

    art/sound/engine/0BE1F1A5405C187702AEE893B40ABF5F/EXH_1126_P.wav

  • Size

    190KB

  • MD5

    8592fbaf555d6e2e305e433a586f0593

  • SHA1

    62ccb8131df4265e895fb9a685fd3a6c72c56c14

  • SHA256

    05425137e97c954b4d6219f062bd2233879708579e3bd3a0b3daad5db38b7853

  • SHA512

    4b11d2d3029378fb28373166ab984c8432d37512f044ba31a0a46a813019e66836b04f407025a709fa3ce20c511b855aceb1f586e4ebec2b8bface3efb312ffd

  • SSDEEP

    3072:zFsFNkUeP8JK0MDcCrbXvXTgQMxW7wBmTY/y/2eltmKUGKITPkar1zd6FyNMe:zUWUzXMDcuDIoSPRUsar1AFeMe

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\engine\0BE1F1A5405C187702AEE893B40ABF5F\EXH_1126_P.wav"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2872-6-0x000007FEF8850000-0x000007FEF8884000-memory.dmp

    Filesize

    208KB

  • memory/2872-15-0x000007FEF6560000-0x000007FEF6760000-memory.dmp

    Filesize

    2.0MB

  • memory/2872-14-0x000007FEF6EB0000-0x000007FEF6EC1000-memory.dmp

    Filesize

    68KB

  • memory/2872-13-0x000007FEF6ED0000-0x000007FEF6EED000-memory.dmp

    Filesize

    116KB

  • memory/2872-37-0x000007FEFB930000-0x000007FEFB940000-memory.dmp

    Filesize

    64KB

  • memory/2872-16-0x000007FEF54B0000-0x000007FEF655B000-memory.dmp

    Filesize

    16.7MB

  • memory/2872-40-0x000007FEF4D30000-0x000007FEF4D41000-memory.dmp

    Filesize

    68KB

  • memory/2872-39-0x000007FEF4D50000-0x000007FEF4D64000-memory.dmp

    Filesize

    80KB

  • memory/2872-38-0x000007FEF4FD0000-0x000007FEF4FFF000-memory.dmp

    Filesize

    188KB

  • memory/2872-36-0x000007FEF51F0000-0x000007FEF5202000-memory.dmp

    Filesize

    72KB

  • memory/2872-35-0x000007FEF5210000-0x000007FEF5221000-memory.dmp

    Filesize

    68KB

  • memory/2872-34-0x000007FEF5230000-0x000007FEF5253000-memory.dmp

    Filesize

    140KB

  • memory/2872-33-0x000007FEF5260000-0x000007FEF5277000-memory.dmp

    Filesize

    92KB

  • memory/2872-32-0x000007FEF5280000-0x000007FEF52A4000-memory.dmp

    Filesize

    144KB

  • memory/2872-30-0x000007FEF52E0000-0x000007FEF5336000-memory.dmp

    Filesize

    344KB

  • memory/2872-31-0x000007FEF52B0000-0x000007FEF52D8000-memory.dmp

    Filesize

    160KB

  • memory/2872-29-0x000007FEF5340000-0x000007FEF5351000-memory.dmp

    Filesize

    68KB

  • memory/2872-28-0x000007FEF5360000-0x000007FEF53CF000-memory.dmp

    Filesize

    444KB

  • memory/2872-27-0x000007FEF53D0000-0x000007FEF5437000-memory.dmp

    Filesize

    412KB

  • memory/2872-26-0x000007FEF5440000-0x000007FEF5470000-memory.dmp

    Filesize

    192KB

  • memory/2872-25-0x000007FEF5470000-0x000007FEF5488000-memory.dmp

    Filesize

    96KB

  • memory/2872-24-0x000007FEF5490000-0x000007FEF54A1000-memory.dmp

    Filesize

    68KB

  • memory/2872-23-0x000007FEF6B60000-0x000007FEF6B7B000-memory.dmp

    Filesize

    108KB

  • memory/2872-22-0x000007FEF6B80000-0x000007FEF6B91000-memory.dmp

    Filesize

    68KB

  • memory/2872-21-0x000007FEF6BA0000-0x000007FEF6BB1000-memory.dmp

    Filesize

    68KB

  • memory/2872-20-0x000007FEF6E00000-0x000007FEF6E11000-memory.dmp

    Filesize

    68KB

  • memory/2872-19-0x000007FEF6E20000-0x000007FEF6E38000-memory.dmp

    Filesize

    96KB

  • memory/2872-18-0x000007FEF6E40000-0x000007FEF6E61000-memory.dmp

    Filesize

    132KB

  • memory/2872-17-0x000007FEF6E70000-0x000007FEF6EAF000-memory.dmp

    Filesize

    252KB

  • memory/2872-12-0x000007FEF7A10000-0x000007FEF7A21000-memory.dmp

    Filesize

    68KB

  • memory/2872-7-0x000007FEF6760000-0x000007FEF6A14000-memory.dmp

    Filesize

    2.7MB

  • memory/2872-11-0x000007FEF7A30000-0x000007FEF7A47000-memory.dmp

    Filesize

    92KB

  • memory/2872-10-0x000007FEF7A50000-0x000007FEF7A61000-memory.dmp

    Filesize

    68KB

  • memory/2872-9-0x000007FEF88A0000-0x000007FEF88B7000-memory.dmp

    Filesize

    92KB

  • memory/2872-8-0x000007FEFBC50000-0x000007FEFBC68000-memory.dmp

    Filesize

    96KB

  • memory/2872-5-0x000000013F690000-0x000000013F788000-memory.dmp

    Filesize

    992KB