Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

1

[Original]... 1.mp3

windows7-x64

[Original]... 1.mp3

windows10-2004-x64

6

Analysis

  • max time kernel
    32s
  • max time network
    38s
  • platform
    windows7_x64
  • resource
    win7-20240221-de
  • resource tags

    arch:x64arch:x86image:win7-20240221-delocale:de-deos:windows7-x64systemwindows
  • submitted
    07/06/2024, 19:27

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Machine shutdown
Report Analysis Logs

General

  • Target

    [Original] Magical Sounds 1.mp3

  • Size

    2.3MB

  • MD5

    ccce10714c5240329f00c16f59cd81e0

  • SHA1

    accf7d641f365902f0315a2106be233c15a522f6

  • SHA256

    f0c32919b62f1fe1c48c0786732f94181758fb2dbf7286b2d3edcbb57b5ca017

  • SHA512

    af6bcd1858474db25e2e18f233ac8fbeac3b1577c2f701af07458355c967712b26c9cee559e62b7e185904f87d1464ef831175984bef36beb682563779bc35af

  • SSDEEP

    49152:dAr/VG+3v/3zCCMc0+rf35faa/5hbAfWO4SbPXrFT7FxNUKipj:dY9R3v/3zC9Cfv/5RNVSbrRBnG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 10 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\[Original] Magical Sounds 1.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1868
  • C:\Windows\system32\LogonUI.exe
    "LogonUI.exe" /flags:0x0
    1⤵
      PID:2844
    • C:\Windows\system32\LogonUI.exe
      "LogonUI.exe" /flags:0x1
      1⤵
        PID:656

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/656-17-0x00000000026E0000-0x00000000026E1000-memory.dmp

        Filesize

        4KB

        Download

      • memory/1868-13-0x000007FEFB9F0000-0x000007FEFBA24000-memory.dmp

        Filesize

        208KB

        Download

      • memory/1868-12-0x000000013FFB0000-0x00000001400A8000-memory.dmp

        Filesize

        992KB

        Download

      • memory/1868-14-0x000007FEF6560000-0x000007FEF6814000-memory.dmp

        Filesize

        2.7MB

        Download

      • memory/1868-15-0x000007FEF54B0000-0x000007FEF655B000-memory.dmp

        Filesize

        16.7MB

        Download

      • memory/2844-16-0x0000000002840000-0x0000000002841000-memory.dmp

        Filesize

        4KB

        Download