Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

24/06/2024, 02:41

240624-c6rwbavglc 1

24/06/2024, 02:39

240624-c5bspsyepr 8

Analysis

  • max time kernel
    31s
  • max time network
    17s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    24/06/2024, 02:41

General

  • Target

    audio-editor-output_3_1.mp3

  • Size

    910KB

  • MD5

    97ff109c1cd624d64bc8b475f3d20e3a

  • SHA1

    91f0e37d3d18d05857233a0b267b80391293fc1a

  • SHA256

    b00206564060bd40748ea7094b1b3f0ec3b2dfca6a0bd8ea46eb189c59429eb7

  • SHA512

    0bc46e398c14a838cf8d2e24d5dc3c47c9bc0db5587b6d0f6abe1b06bc8d2cfa5c454bef03ac1fabfcf58498bf9eccc655f849a390f129fdffc563405174edf5

  • SSDEEP

    12288:XK9DH8yWU3ACs77fgAwGcgXl7Qgb45gv+BUG9yWwOBXZC9pbYe97Hjr9zvwETRWF:2cyNQ9P2kbbGBUYzwnTZ71z9cQ0AZxW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\audio-editor-output_3_1.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:5032
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x3d0
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5032-7-0x00007FF7D3940000-0x00007FF7D3A38000-memory.dmp

    Filesize

    992KB

  • memory/5032-8-0x00007FFCDEAB0000-0x00007FFCDEAE4000-memory.dmp

    Filesize

    208KB

  • memory/5032-15-0x00007FFCDEA30000-0x00007FFCDEA4D000-memory.dmp

    Filesize

    116KB

  • memory/5032-14-0x00007FFCDEA50000-0x00007FFCDEA61000-memory.dmp

    Filesize

    68KB

  • memory/5032-19-0x00007FFCDE990000-0x00007FFCDE9B1000-memory.dmp

    Filesize

    132KB

  • memory/5032-20-0x00007FFCDCC10000-0x00007FFCDCC28000-memory.dmp

    Filesize

    96KB

  • memory/5032-16-0x00007FFCD95B0000-0x00007FFCD97BB000-memory.dmp

    Filesize

    2.0MB

  • memory/5032-18-0x00007FFCDE9C0000-0x00007FFCDEA01000-memory.dmp

    Filesize

    260KB

  • memory/5032-17-0x00007FFCDEA10000-0x00007FFCDEA21000-memory.dmp

    Filesize

    68KB

  • memory/5032-25-0x00007FFCDCB90000-0x00007FFCDCBAB000-memory.dmp

    Filesize

    108KB

  • memory/5032-24-0x00007FFCDCBB0000-0x00007FFCDCBC1000-memory.dmp

    Filesize

    68KB

  • memory/5032-23-0x00007FFCDCBD0000-0x00007FFCDCBE1000-memory.dmp

    Filesize

    68KB

  • memory/5032-22-0x00007FFCDCBF0000-0x00007FFCDCC01000-memory.dmp

    Filesize

    68KB

  • memory/5032-9-0x00007FFCCC410000-0x00007FFCCC6C6000-memory.dmp

    Filesize

    2.7MB

  • memory/5032-13-0x00007FFCDEA70000-0x00007FFCDEA87000-memory.dmp

    Filesize

    92KB

  • memory/5032-12-0x00007FFCDEA90000-0x00007FFCDEAA1000-memory.dmp

    Filesize

    68KB

  • memory/5032-21-0x00007FFCCB360000-0x00007FFCCC410000-memory.dmp

    Filesize

    16.7MB

  • memory/5032-11-0x00007FFCDED30000-0x00007FFCDED47000-memory.dmp

    Filesize

    92KB

  • memory/5032-10-0x00007FFCE2420000-0x00007FFCE2438000-memory.dmp

    Filesize

    96KB

  • memory/5032-30-0x00007FFCCC410000-0x00007FFCCC6C6000-memory.dmp

    Filesize

    2.7MB

  • memory/5032-42-0x00007FFCCB360000-0x00007FFCCC410000-memory.dmp

    Filesize

    16.7MB

  • memory/5032-49-0x00007FFCCC410000-0x00007FFCCC6C6000-memory.dmp

    Filesize

    2.7MB

  • memory/5032-61-0x00007FFCCB360000-0x00007FFCCC410000-memory.dmp

    Filesize

    16.7MB