Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    31s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240611-es
  • resource tags

    arch:x64arch:x86image:win7-20240611-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    24/06/2024, 00:19

General

  • Target

    yebelle.mkv

  • Size

    14.4MB

  • MD5

    7b18e283d278bc9e4c4b0820219c129c

  • SHA1

    aed6c2293ed9997c319076c63e6a0e119aeeb3c8

  • SHA256

    55a330a02218cdefa042111f5b958b3311e11261abaf095d2782779989652775

  • SHA512

    6645185fadb072990943625670360583d635e60211203f5af73f1de4e84c6b6ecb0aff4ff53f4a9e017b720b649cfa8193341b664ce002819ea18d6d644b9f78

  • SSDEEP

    98304:/bnHD18Q3fH0bjr/7jx77rAjyR06RajL2iKbN+vbhQJAsNvlc4O:znHNH0r/nx7XAjyR06ROLoh+vkZBlnO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\yebelle.mkv"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1784-7-0x000000013FE90000-0x000000013FF88000-memory.dmp

    Filesize

    992KB

  • memory/1784-8-0x000007FEF7C50000-0x000007FEF7C84000-memory.dmp

    Filesize

    208KB

  • memory/1784-15-0x000007FEF7A10000-0x000007FEF7A2D000-memory.dmp

    Filesize

    116KB

  • memory/1784-16-0x000007FEF79F0000-0x000007FEF7A01000-memory.dmp

    Filesize

    68KB

  • memory/1784-12-0x000007FEF7CB0000-0x000007FEF7CC1000-memory.dmp

    Filesize

    68KB

  • memory/1784-14-0x000007FEF7A30000-0x000007FEF7A41000-memory.dmp

    Filesize

    68KB

  • memory/1784-13-0x000007FEF7C30000-0x000007FEF7C47000-memory.dmp

    Filesize

    92KB

  • memory/1784-9-0x000007FEF6250000-0x000007FEF6506000-memory.dmp

    Filesize

    2.7MB

  • memory/1784-11-0x000007FEFB250000-0x000007FEFB267000-memory.dmp

    Filesize

    92KB

  • memory/1784-10-0x000007FEFB910000-0x000007FEFB928000-memory.dmp

    Filesize

    96KB

  • memory/1784-18-0x000007FEF4F90000-0x000007FEF519B000-memory.dmp

    Filesize

    2.0MB

  • memory/1784-20-0x000007FEF7420000-0x000007FEF7441000-memory.dmp

    Filesize

    132KB

  • memory/1784-35-0x000007FEF6880000-0x000007FEF6898000-memory.dmp

    Filesize

    96KB

  • memory/1784-17-0x000007FEF51A0000-0x000007FEF6250000-memory.dmp

    Filesize

    16.7MB

  • memory/1784-38-0x000007FEF4D70000-0x000007FEF4D82000-memory.dmp

    Filesize

    72KB

  • memory/1784-37-0x000007FEF4D90000-0x000007FEF4DA1000-memory.dmp

    Filesize

    68KB

  • memory/1784-36-0x000007FEF4DB0000-0x000007FEF4DD3000-memory.dmp

    Filesize

    140KB

  • memory/1784-34-0x000007FEF4DE0000-0x000007FEF4E04000-memory.dmp

    Filesize

    144KB

  • memory/1784-33-0x000007FEF4E10000-0x000007FEF4E38000-memory.dmp

    Filesize

    160KB

  • memory/1784-32-0x000007FEF4E40000-0x000007FEF4E97000-memory.dmp

    Filesize

    348KB

  • memory/1784-31-0x000007FEF68A0000-0x000007FEF68B1000-memory.dmp

    Filesize

    68KB

  • memory/1784-30-0x000007FEF4EA0000-0x000007FEF4F1C000-memory.dmp

    Filesize

    496KB

  • memory/1784-29-0x000007FEF4F20000-0x000007FEF4F87000-memory.dmp

    Filesize

    412KB

  • memory/1784-28-0x000007FEF68C0000-0x000007FEF68F0000-memory.dmp

    Filesize

    192KB

  • memory/1784-21-0x000007FEF6E80000-0x000007FEF6E98000-memory.dmp

    Filesize

    96KB

  • memory/1784-27-0x000007FEF68F0000-0x000007FEF6908000-memory.dmp

    Filesize

    96KB

  • memory/1784-26-0x000007FEF6910000-0x000007FEF6921000-memory.dmp

    Filesize

    68KB

  • memory/1784-25-0x000007FEF6930000-0x000007FEF694B000-memory.dmp

    Filesize

    108KB

  • memory/1784-24-0x000007FEF6950000-0x000007FEF6961000-memory.dmp

    Filesize

    68KB

  • memory/1784-23-0x000007FEF6970000-0x000007FEF6981000-memory.dmp

    Filesize

    68KB

  • memory/1784-22-0x000007FEF6E60000-0x000007FEF6E71000-memory.dmp

    Filesize

    68KB

  • memory/1784-19-0x000007FEF6EA0000-0x000007FEF6EE1000-memory.dmp

    Filesize

    260KB

  • memory/1784-54-0x000007FEF20B0000-0x000007FEF20C3000-memory.dmp

    Filesize

    76KB

  • memory/1784-59-0x000007FEF00F0000-0x000007FEF0164000-memory.dmp

    Filesize

    464KB

  • memory/1784-61-0x000007FEEFCB0000-0x000007FEEFCFE000-memory.dmp

    Filesize

    312KB

  • memory/1784-60-0x000007FEEFE20000-0x000007FEEFE31000-memory.dmp

    Filesize

    68KB

  • memory/1784-63-0x000007FEEFC10000-0x000007FEEFC44000-memory.dmp

    Filesize

    208KB

  • memory/1784-62-0x000007FEEFC50000-0x000007FEEFCA7000-memory.dmp

    Filesize

    348KB

  • memory/1784-53-0x000007FEF20D0000-0x000007FEF20F3000-memory.dmp

    Filesize

    140KB

  • memory/1784-58-0x000007FEF1960000-0x000007FEF19A7000-memory.dmp

    Filesize

    284KB

  • memory/1784-57-0x000007FEF19B0000-0x000007FEF1A11000-memory.dmp

    Filesize

    388KB

  • memory/1784-56-0x000007FEF1D80000-0x000007FEF1D91000-memory.dmp

    Filesize

    68KB

  • memory/1784-55-0x000007FEF1FA0000-0x000007FEF20A6000-memory.dmp

    Filesize

    1.0MB

  • memory/1784-52-0x000007FEF2100000-0x000007FEF227A000-memory.dmp

    Filesize

    1.5MB

  • memory/1784-51-0x000007FEF2280000-0x000007FEF2295000-memory.dmp

    Filesize

    84KB

  • memory/1784-40-0x000007FEF2DB0000-0x000007FEF2FB6000-memory.dmp

    Filesize

    2.0MB

  • memory/1784-50-0x000007FEF22A0000-0x000007FEF22B2000-memory.dmp

    Filesize

    72KB

  • memory/1784-49-0x000007FEF22C0000-0x000007FEF22D1000-memory.dmp

    Filesize

    68KB

  • memory/1784-48-0x000007FEF2620000-0x000007FEF2634000-memory.dmp

    Filesize

    80KB

  • memory/1784-47-0x000007FEF2640000-0x000007FEF2653000-memory.dmp

    Filesize

    76KB

  • memory/1784-46-0x000007FEF2660000-0x000007FEF26CD000-memory.dmp

    Filesize

    436KB

  • memory/1784-45-0x000007FEF26D0000-0x000007FEF2732000-memory.dmp

    Filesize

    392KB

  • memory/1784-44-0x000007FEF2740000-0x000007FEF2782000-memory.dmp

    Filesize

    264KB

  • memory/1784-43-0x000007FEF2790000-0x000007FEF2855000-memory.dmp

    Filesize

    788KB

  • memory/1784-42-0x000007FEF2860000-0x000007FEF2876000-memory.dmp

    Filesize

    88KB

  • memory/1784-41-0x000007FEF2880000-0x000007FEF2891000-memory.dmp

    Filesize

    68KB

  • memory/1784-39-0x000007FEF2FC0000-0x000007FEF482F000-memory.dmp

    Filesize

    24.4MB

  • memory/1784-66-0x000007FEF6250000-0x000007FEF6506000-memory.dmp

    Filesize

    2.7MB