Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
41s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
01/06/2024, 08:10
Static task
static1
Behavioral task
behavioral1
Sample
VID_10221125_213903_010.avi
Resource
win7-20240508-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
VID_10221125_213903_010.avi
Resource
win10v2004-20240508-en
3 signatures
150 seconds
General
-
Target
VID_10221125_213903_010.avi
-
Size
82.0MB
-
MD5
b7990648c6f29fbb6014f0bd8bfd325f
-
SHA1
e559a98927d3efa31864f00d2e184bad72720219
-
SHA256
e59b7823d3fe310de5c2efddee12b7ff53baf5eae0b24b90a13ac1347e1b451d
-
SHA512
58b6180941ccd234349e062156116ddbe105137cc4325874c1786c357ce76f94629bf59f37a9bbb341d822755b0a02cc7fe4eb7d0439cdb931be50e7fc86eb68
-
SSDEEP
1572864:8vMvKqOSdzhGAArvWlhXYNKQQdOqdHCnbv8yejSTchvKY4cZdGAU3Ff8e+uHjM+N:8vKXOSzhGJsFs8HinbvASodFhZdDYf7B
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2344 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2344 vlc.exe -
Suspicious use of FindShellTrayWindow 33 IoCs
pid Process 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe -
Suspicious use of SendNotifyMessage 9 IoCs
pid Process 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe 2344 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2344 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\VID_10221125_213903_010.avi"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2344