Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 21:58

General

  • Target

    art/sound/engine/0BE1F1A5405C187702AEE893B40ABF5F/EXH_1380_P.wav

  • Size

    191KB

  • MD5

    b22915e6396505318a55db70fb19cbce

  • SHA1

    77ced790ce77c84447e723349d41d025ab8d7080

  • SHA256

    aa4f5fcea947ba994a39a985fcff55f6aa12af83810638c2f392087892f20578

  • SHA512

    245ce9ca44814776c3698a6331f757394ead67fa155ebdb9eccb8f595997bf09abc85eba3ca8a4d4193a75e8c84074e8d0f85c72326462ade6a886f255b718de

  • SSDEEP

    3072:kilh8cJHLsvGhhY7NvOaztyZK6gXNciJ6tf9+J4nAu/AHykfftDEeg6:ki0OMF1yEa+J4nlALftD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\engine\0BE1F1A5405C187702AEE893B40ABF5F\EXH_1380_P.wav"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2140-12-0x000007FEF8160000-0x000007FEF8171000-memory.dmp

    Filesize

    68KB

  • memory/2140-15-0x000007FEF6680000-0x000007FEF6880000-memory.dmp

    Filesize

    2.0MB

  • memory/2140-24-0x000007FEF7EE0000-0x000007FEF7EF1000-memory.dmp

    Filesize

    68KB

  • memory/2140-42-0x000007FEF51C0000-0x000007FEF51D1000-memory.dmp

    Filesize

    68KB

  • memory/2140-16-0x000007FEF55D0000-0x000007FEF667B000-memory.dmp

    Filesize

    16.7MB

  • memory/2140-50-0x000007FEF4F60000-0x000007FEF4F76000-memory.dmp

    Filesize

    88KB

  • memory/2140-49-0x000007FEF4F80000-0x000007FEF4F91000-memory.dmp

    Filesize

    68KB

  • memory/2140-48-0x000007FEF4FA0000-0x000007FEF4FB1000-memory.dmp

    Filesize

    68KB

  • memory/2140-47-0x000007FEF4FC0000-0x000007FEF4FD1000-memory.dmp

    Filesize

    68KB

  • memory/2140-46-0x000007FEF4FE0000-0x000007FEF4FF4000-memory.dmp

    Filesize

    80KB

  • memory/2140-45-0x000007FEF5000000-0x000007FEF5013000-memory.dmp

    Filesize

    76KB

  • memory/2140-44-0x000007FEF5020000-0x000007FEF519A000-memory.dmp

    Filesize

    1.5MB

  • memory/2140-43-0x000007FEF51A0000-0x000007FEF51B2000-memory.dmp

    Filesize

    72KB

  • memory/2140-41-0x000007FEF5200000-0x000007FEF5215000-memory.dmp

    Filesize

    84KB

  • memory/2140-40-0x000007FEF5220000-0x000007FEF5236000-memory.dmp

    Filesize

    88KB

  • memory/2140-39-0x000007FEF5240000-0x000007FEF5251000-memory.dmp

    Filesize

    68KB

  • memory/2140-38-0x000007FEF5260000-0x000007FEF528F000-memory.dmp

    Filesize

    188KB

  • memory/2140-37-0x000007FEFBB80000-0x000007FEFBB90000-memory.dmp

    Filesize

    64KB

  • memory/2140-36-0x000007FEF5480000-0x000007FEF5492000-memory.dmp

    Filesize

    72KB

  • memory/2140-35-0x000007FEF54A0000-0x000007FEF54B1000-memory.dmp

    Filesize

    68KB

  • memory/2140-34-0x000007FEF54C0000-0x000007FEF54E3000-memory.dmp

    Filesize

    140KB

  • memory/2140-32-0x000007FEF69C0000-0x000007FEF69E4000-memory.dmp

    Filesize

    144KB

  • memory/2140-33-0x000007FEF6ED0000-0x000007FEF6EE7000-memory.dmp

    Filesize

    92KB

  • memory/2140-30-0x000007FEF7310000-0x000007FEF7366000-memory.dmp

    Filesize

    344KB

  • memory/2140-31-0x000007FEF6A30000-0x000007FEF6A58000-memory.dmp

    Filesize

    160KB

  • memory/2140-29-0x000007FEF7EA0000-0x000007FEF7EB1000-memory.dmp

    Filesize

    68KB

  • memory/2140-28-0x000007FEF54F0000-0x000007FEF555F000-memory.dmp

    Filesize

    444KB

  • memory/2140-26-0x000007FEF7370000-0x000007FEF73A0000-memory.dmp

    Filesize

    192KB

  • memory/2140-27-0x000007FEF5560000-0x000007FEF55C7000-memory.dmp

    Filesize

    412KB

  • memory/2140-25-0x000007FEF7EC0000-0x000007FEF7ED8000-memory.dmp

    Filesize

    96KB

  • memory/2140-23-0x000007FEF7F00000-0x000007FEF7F1B000-memory.dmp

    Filesize

    108KB

  • memory/2140-22-0x000007FEF7F20000-0x000007FEF7F31000-memory.dmp

    Filesize

    68KB

  • memory/2140-21-0x000007FEF7F40000-0x000007FEF7F51000-memory.dmp

    Filesize

    68KB

  • memory/2140-20-0x000007FEF8070000-0x000007FEF8081000-memory.dmp

    Filesize

    68KB

  • memory/2140-19-0x000007FEF8090000-0x000007FEF80A8000-memory.dmp

    Filesize

    96KB

  • memory/2140-18-0x000007FEF80B0000-0x000007FEF80D1000-memory.dmp

    Filesize

    132KB

  • memory/2140-17-0x000007FEF80E0000-0x000007FEF811F000-memory.dmp

    Filesize

    252KB

  • memory/2140-7-0x000007FEF6A60000-0x000007FEF6D14000-memory.dmp

    Filesize

    2.7MB

  • memory/2140-14-0x000007FEF8120000-0x000007FEF8131000-memory.dmp

    Filesize

    68KB

  • memory/2140-13-0x000007FEF8140000-0x000007FEF815D000-memory.dmp

    Filesize

    116KB

  • memory/2140-11-0x000007FEFB770000-0x000007FEFB787000-memory.dmp

    Filesize

    92KB

  • memory/2140-9-0x000007FEFBB00000-0x000007FEFBB17000-memory.dmp

    Filesize

    92KB

  • memory/2140-10-0x000007FEFB810000-0x000007FEFB821000-memory.dmp

    Filesize

    68KB

  • memory/2140-8-0x000007FEFBF10000-0x000007FEFBF28000-memory.dmp

    Filesize

    96KB

  • memory/2140-5-0x000000013F9B0000-0x000000013FAA8000-memory.dmp

    Filesize

    992KB

  • memory/2140-6-0x000007FEFBA90000-0x000007FEFBAC4000-memory.dmp

    Filesize

    208KB