Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1790s -
max time network
1562s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
29/05/2024, 12:15
Static task
static1
Behavioral task
behavioral1
Sample
Россич дай черепаху.mp4
Resource
win7-20240220-en
6 signatures
1800 seconds
Behavioral task
behavioral2
Sample
Россич дай черепаху.mp4
Resource
win10v2004-20240426-en
3 signatures
1800 seconds
General
-
Target
Россич дай черепаху.mp4
-
Size
2.1MB
-
MD5
70bd2305458e17881abe099f5a66de14
-
SHA1
ae3a4af43c50bb808fa09be350f217cd35a058a4
-
SHA256
cb7fedf2da66d8f6500554177d6a79219e9334941f13295aab0ef2174eb87dfe
-
SHA512
cce762ee41f22fb01228bd85922ca756f41218ffbae720c12ebf1b6cd4c64dee39894cfe2b9a411e6b1e0e1aebcbe053f029991a1916f9ff39d15446188140ef
-
SSDEEP
49152:ePM8Q1y+e6XQFojMbISMatQICE6qUnN11+9aXQHYwY:et9qMEDubUN1YUgHYr
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2904 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2904 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2904 vlc.exe Token: SeIncBasePriorityPrivilege 2904 vlc.exe -
Suspicious use of FindShellTrayWindow 27 IoCs
pid Process 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe 2904 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2904 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Россич дай черепаху.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2904