Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1791s -
max time network
1565s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
25/06/2024, 08:07
Static task
static1
Behavioral task
behavioral1
Sample
mas.mp4
Resource
win7-20240419-en
6 signatures
1800 seconds
General
-
Target
mas.mp4
-
Size
865KB
-
MD5
eaccf7b56b33bbc93848c9766bc82bc7
-
SHA1
17cc4e2b512cfa7ff0d7a7b1c0a62d6cde829bc7
-
SHA256
353cc078aef30e067439ac166d47612ee05065731f13ab1397b5222a8072b58d
-
SHA512
c193196a3bf189a9857bf46ba9b48460a57a82ba19f9d3aa431d0f13d74cab88729e12f1f6089c25534c91a6f6eb7096ffb5d36e257b9109345f506542a4bdd3
-
SSDEEP
24576:Xd09m7KxWoUuHCc9O+VAimAfZzfT1QKFhs3KNFVxGxXYDeRX:N0uKxLUuic9bVAimA5fh3dNbgxID4
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2236 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2236 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2236 vlc.exe Token: SeIncBasePriorityPrivilege 2236 vlc.exe -
Suspicious use of FindShellTrayWindow 27 IoCs
pid Process 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe 2236 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2236 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\mas.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2236