Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    80s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 07:41

General

  • Target

    MAGINA x FORCE.mp3

  • Size

    4.2MB

  • MD5

    fed815ed1d8704ed2a32d3d6389c26a7

  • SHA1

    07e11cb0639fe6d0b2f55f88de6e5752ab65b506

  • SHA256

    26efa8b5bd37a5a0486311c7a983a6cca22c0887369889045325fa8a3e7dc908

  • SHA512

    2382894774bb5edafbdc3314d9d53b694acd03bc337dae6c74a9dd4d0aa78375cf27e7558b74c21bbd3e83f7a393864af7734cb6813841c5dc766390dce67ef9

  • SSDEEP

    49152:NaozkU9TJiiIMjdcHxeZhxfndmwuI6tALGkH9NUCKtejuJeBSmRT5DLztv4lzfB3:pzX9ZvnswuI5pd/e/yH14tyHnKQhkCeT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\MAGINA x FORCE.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1600-6-0x000007FEFB170000-0x000007FEFB1A4000-memory.dmp

    Filesize

    208KB

  • memory/1600-5-0x000000013FCA0000-0x000000013FD98000-memory.dmp

    Filesize

    992KB

  • memory/1600-8-0x000007FEFB890000-0x000007FEFB8A8000-memory.dmp

    Filesize

    96KB

  • memory/1600-14-0x000007FEF7A70000-0x000007FEF7A81000-memory.dmp

    Filesize

    68KB

  • memory/1600-13-0x000007FEF7C30000-0x000007FEF7C4D000-memory.dmp

    Filesize

    116KB

  • memory/1600-12-0x000007FEF7C50000-0x000007FEF7C61000-memory.dmp

    Filesize

    68KB

  • memory/1600-7-0x000007FEF6440000-0x000007FEF66F6000-memory.dmp

    Filesize

    2.7MB

  • memory/1600-11-0x000007FEF7C90000-0x000007FEF7CA7000-memory.dmp

    Filesize

    92KB

  • memory/1600-10-0x000007FEFB130000-0x000007FEFB141000-memory.dmp

    Filesize

    68KB

  • memory/1600-9-0x000007FEFB150000-0x000007FEFB167000-memory.dmp

    Filesize

    92KB

  • memory/1600-15-0x000007FEF6230000-0x000007FEF643B000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-26-0x000007FEF5150000-0x000007FEF5180000-memory.dmp

    Filesize

    192KB

  • memory/1600-35-0x000007FEF4F50000-0x000007FEF4F61000-memory.dmp

    Filesize

    68KB

  • memory/1600-38-0x000007FEF31D0000-0x000007FEF31F8000-memory.dmp

    Filesize

    160KB

  • memory/1600-40-0x000007FEF2FD0000-0x000007FEF2FE2000-memory.dmp

    Filesize

    72KB

  • memory/1600-39-0x000007FEF2FF0000-0x000007FEF3001000-memory.dmp

    Filesize

    68KB

  • memory/1600-16-0x000007FEF5180000-0x000007FEF6230000-memory.dmp

    Filesize

    16.7MB

  • memory/1600-37-0x000007FEF3200000-0x000007FEF3257000-memory.dmp

    Filesize

    348KB

  • memory/1600-34-0x000007FEF4F70000-0x000007FEF4F83000-memory.dmp

    Filesize

    76KB

  • memory/1600-33-0x000007FEF4F90000-0x000007FEF4FBF000-memory.dmp

    Filesize

    188KB

  • memory/1600-36-0x000007FEF4E80000-0x000007FEF4F45000-memory.dmp

    Filesize

    788KB

  • memory/1600-41-0x000007FEF2E50000-0x000007FEF2FCA000-memory.dmp

    Filesize

    1.5MB

  • memory/1600-32-0x000007FEF4FC0000-0x000007FEF5017000-memory.dmp

    Filesize

    348KB

  • memory/1600-31-0x000007FEF5020000-0x000007FEF5031000-memory.dmp

    Filesize

    68KB

  • memory/1600-30-0x000007FEF5040000-0x000007FEF5058000-memory.dmp

    Filesize

    96KB

  • memory/1600-29-0x000007FEF69C0000-0x000007FEF69D1000-memory.dmp

    Filesize

    68KB

  • memory/1600-28-0x000007FEF5060000-0x000007FEF50DC000-memory.dmp

    Filesize

    496KB

  • memory/1600-27-0x000007FEF50E0000-0x000007FEF5147000-memory.dmp

    Filesize

    412KB

  • memory/1600-25-0x000007FEF69E0000-0x000007FEF69F8000-memory.dmp

    Filesize

    96KB

  • memory/1600-24-0x000007FEF6DA0000-0x000007FEF6DB1000-memory.dmp

    Filesize

    68KB

  • memory/1600-23-0x000007FEF6DC0000-0x000007FEF6DDB000-memory.dmp

    Filesize

    108KB

  • memory/1600-22-0x000007FEF6DE0000-0x000007FEF6DF1000-memory.dmp

    Filesize

    68KB

  • memory/1600-21-0x000007FEF6FC0000-0x000007FEF6FD1000-memory.dmp

    Filesize

    68KB

  • memory/1600-20-0x000007FEF79B0000-0x000007FEF79C1000-memory.dmp

    Filesize

    68KB

  • memory/1600-19-0x000007FEF79D0000-0x000007FEF79E8000-memory.dmp

    Filesize

    96KB

  • memory/1600-18-0x000007FEF79F0000-0x000007FEF7A11000-memory.dmp

    Filesize

    132KB

  • memory/1600-17-0x000007FEF7A20000-0x000007FEF7A61000-memory.dmp

    Filesize

    260KB