Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    110s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240611-es
  • resource tags

    arch:x64arch:x86image:win7-20240611-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    14/06/2024, 12:55

General

  • Target

    Lorena2.mp4

  • Size

    9.9MB

  • MD5

    214f1885246c20f3cb4d7b24b0598957

  • SHA1

    964e0de4cb74efd20bf6b65b7eff632debb8cf5d

  • SHA256

    c5cfa9fbb37485f0e29941eeccf61631e35993193fec6e6e575e2b0320c5308b

  • SHA512

    485b691bd48bd4f782376219bae0cc94040abae2e71e7fcce2d262b0167dd5c547d1ae4a3351fe34c0f0151c9a88df10699d2d1d5f373c6a67ce09db09e11884

  • SSDEEP

    196608:/V1VPox8X6ydU7bWEdTtRw6vEPwbVopojgBISEdWGJz8leeaUAhbcjjnSob62Hzt:/TVPo1ydU3WitC6sYh3jgihWIkebUuAL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 27 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Lorena2.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2284-6-0x000007FEF8530000-0x000007FEF8564000-memory.dmp

    Filesize

    208KB

  • memory/2284-5-0x000000013F810000-0x000000013F908000-memory.dmp

    Filesize

    992KB

  • memory/2284-9-0x000007FEFAD40000-0x000007FEFAD57000-memory.dmp

    Filesize

    92KB

  • memory/2284-14-0x000007FEF6BB0000-0x000007FEF6BC1000-memory.dmp

    Filesize

    68KB

  • memory/2284-13-0x000007FEF6BD0000-0x000007FEF6BED000-memory.dmp

    Filesize

    116KB

  • memory/2284-7-0x000007FEF64C0000-0x000007FEF6776000-memory.dmp

    Filesize

    2.7MB

  • memory/2284-12-0x000007FEF7710000-0x000007FEF7721000-memory.dmp

    Filesize

    68KB

  • memory/2284-11-0x000007FEF7730000-0x000007FEF7747000-memory.dmp

    Filesize

    92KB

  • memory/2284-10-0x000007FEF7750000-0x000007FEF7761000-memory.dmp

    Filesize

    68KB

  • memory/2284-8-0x000007FEFB8C0000-0x000007FEFB8D8000-memory.dmp

    Filesize

    96KB

  • memory/2284-15-0x000007FEF62B0000-0x000007FEF64BB000-memory.dmp

    Filesize

    2.0MB

  • memory/2284-19-0x000007FEF6B10000-0x000007FEF6B28000-memory.dmp

    Filesize

    96KB

  • memory/2284-18-0x000007FEF6B30000-0x000007FEF6B51000-memory.dmp

    Filesize

    132KB

  • memory/2284-21-0x000007FEF51E0000-0x000007FEF51F1000-memory.dmp

    Filesize

    68KB

  • memory/2284-20-0x000007FEF6AF0000-0x000007FEF6B01000-memory.dmp

    Filesize

    68KB

  • memory/2284-17-0x000007FEF6B60000-0x000007FEF6BA1000-memory.dmp

    Filesize

    260KB

  • memory/2284-22-0x000007FEF51C0000-0x000007FEF51D1000-memory.dmp

    Filesize

    68KB

  • memory/2284-23-0x000007FEF51A0000-0x000007FEF51BB000-memory.dmp

    Filesize

    108KB

  • memory/2284-29-0x000007FEF5020000-0x000007FEF5031000-memory.dmp

    Filesize

    68KB

  • memory/2284-30-0x000007FEF4FC0000-0x000007FEF5017000-memory.dmp

    Filesize

    348KB

  • memory/2284-28-0x000007FEF5040000-0x000007FEF50BC000-memory.dmp

    Filesize

    496KB

  • memory/2284-32-0x000007FEF4E20000-0x000007FEF4E37000-memory.dmp

    Filesize

    92KB

  • memory/2284-31-0x000007FEF4E40000-0x000007FEF4FC0000-memory.dmp

    Filesize

    1.5MB

  • memory/2284-27-0x000007FEF50C0000-0x000007FEF5127000-memory.dmp

    Filesize

    412KB

  • memory/2284-26-0x000007FEF5130000-0x000007FEF5160000-memory.dmp

    Filesize

    192KB

  • memory/2284-25-0x000007FEF5160000-0x000007FEF5178000-memory.dmp

    Filesize

    96KB

  • memory/2284-16-0x000007FEF5200000-0x000007FEF62B0000-memory.dmp

    Filesize

    16.7MB

  • memory/2284-24-0x000007FEF5180000-0x000007FEF5191000-memory.dmp

    Filesize

    68KB

  • memory/2284-38-0x000007FEFAD30000-0x000007FEFAD40000-memory.dmp

    Filesize

    64KB

  • memory/2284-41-0x000007FEF2870000-0x000007FEF2885000-memory.dmp

    Filesize

    84KB

  • memory/2284-43-0x000007FEF2820000-0x000007FEF2833000-memory.dmp

    Filesize

    76KB

  • memory/2284-42-0x000007FEF2840000-0x000007FEF2863000-memory.dmp

    Filesize

    140KB

  • memory/2284-40-0x000007FEF2E70000-0x000007FEF2E81000-memory.dmp

    Filesize

    68KB

  • memory/2284-44-0x000007FEF2710000-0x000007FEF2816000-memory.dmp

    Filesize

    1.0MB

  • memory/2284-52-0x000007FEF2600000-0x000007FEF2612000-memory.dmp

    Filesize

    72KB

  • memory/2284-51-0x000007FEF2620000-0x000007FEF2634000-memory.dmp

    Filesize

    80KB

  • memory/2284-56-0x000007FEF0CE0000-0x000007FEF0D41000-memory.dmp

    Filesize

    388KB

  • memory/2284-59-0x000007FEF20F0000-0x000007FEF2101000-memory.dmp

    Filesize

    68KB

  • memory/2284-60-0x000007FEF05D0000-0x000007FEF061E000-memory.dmp

    Filesize

    312KB

  • memory/2284-62-0x000007FEF0530000-0x000007FEF0564000-memory.dmp

    Filesize

    208KB

  • memory/2284-61-0x000007FEF0570000-0x000007FEF05C7000-memory.dmp

    Filesize

    348KB

  • memory/2284-58-0x000007FEF09D0000-0x000007FEF0A44000-memory.dmp

    Filesize

    464KB

  • memory/2284-57-0x000007FEF0C90000-0x000007FEF0CD7000-memory.dmp

    Filesize

    284KB

  • memory/2284-33-0x000007FEF35B0000-0x000007FEF4E1F000-memory.dmp

    Filesize

    24.4MB

  • memory/2284-55-0x000007FEF2110000-0x000007FEF2121000-memory.dmp

    Filesize

    68KB

  • memory/2284-54-0x000007FEF21E0000-0x000007FEF21F5000-memory.dmp

    Filesize

    84KB

  • memory/2284-53-0x000007FEF2200000-0x000007FEF2215000-memory.dmp

    Filesize

    84KB

  • memory/2284-50-0x000007FEF2640000-0x000007FEF2653000-memory.dmp

    Filesize

    76KB

  • memory/2284-49-0x000007FEF2660000-0x000007FEF2675000-memory.dmp

    Filesize

    84KB

  • memory/2284-48-0x000007FEF2680000-0x000007FEF2692000-memory.dmp

    Filesize

    72KB

  • memory/2284-47-0x000007FEF26A0000-0x000007FEF26BB000-memory.dmp

    Filesize

    108KB

  • memory/2284-46-0x000007FEF26C0000-0x000007FEF26D3000-memory.dmp

    Filesize

    76KB

  • memory/2284-45-0x000007FEF26E0000-0x000007FEF270A000-memory.dmp

    Filesize

    168KB

  • memory/2284-39-0x000007FEF2E90000-0x000007FEF2EBF000-memory.dmp

    Filesize

    188KB

  • memory/2284-37-0x000007FEF32E0000-0x000007FEF332D000-memory.dmp

    Filesize

    308KB

  • memory/2284-36-0x000007FEF3330000-0x000007FEF3372000-memory.dmp

    Filesize

    264KB

  • memory/2284-35-0x000007FEF3380000-0x000007FEF3392000-memory.dmp

    Filesize

    72KB

  • memory/2284-34-0x000007FEF33A0000-0x000007FEF35A6000-memory.dmp

    Filesize

    2.0MB

  • memory/2284-65-0x000007FEF64C0000-0x000007FEF6776000-memory.dmp

    Filesize

    2.7MB