Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1790s -
max time network
1564s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
30/05/2024, 12:00
Static task
static1
Behavioral task
behavioral1
Sample
video (2) (1).mov
Resource
win7-20240508-en
6 signatures
1800 seconds
Behavioral task
behavioral2
Sample
video (2) (1).mov
Resource
win10v2004-20240426-en
3 signatures
1800 seconds
General
-
Target
video (2) (1).mov
-
Size
137KB
-
MD5
1772fbe5558e9ba3f13a4caf655495dc
-
SHA1
27c0b2e4329c5abec1caccb0a7bb2091ea379e85
-
SHA256
7ebd13a81120f735ace4430656be3be4c19fde96eff5f339e70529d680d2bf0e
-
SHA512
e8d53a3d7665f2e7d10ab9f856d538339f229750bedaf56aa69be73a0014867a4162e5dbaf5ddea89845f52a33bd0bfb4b96c8f7282cbcc16f7209f45b19e156
-
SSDEEP
3072:dkIH93ERKBVuJzeXhe7oaJeh2HbOk98VZ716zmJH3k1/:yIVEgBEke7O4HbOkw+s3kN
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2204 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2204 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2204 vlc.exe Token: SeIncBasePriorityPrivilege 2204 vlc.exe -
Suspicious use of FindShellTrayWindow 28 IoCs
pid Process 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe -
Suspicious use of SendNotifyMessage 9 IoCs
pid Process 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe 2204 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2204 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\video (2) (1).mov"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2204