Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
195s -
max time network
197s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
23/07/2024, 13:37 UTC
General
-
Target
CUFFED (ULTRA SLOWED).mp3
-
Size
2.5MB
-
MD5
6e7c596e8727edc6595f17cc490b00b9
-
SHA1
1c3ed994811d1ee79f692ef6a69a9339c3c67d65
-
SHA256
8889cc10324fafe126c861cea6f355720a76fa76ecc8ac2c738b79bbdddd87d2
-
SHA512
8287b7b8fa67800212504d6ab0bf0d6bf576ec5e94c04fac2235bb700d3bbea977d2ed1d2e30220339cdc4b3430ce44e989ab23994d50f9eab50731f6a1539ca
-
SSDEEP
49152:3hyeIribxd8MVYBuwStIyGB1Ium4mhkzcw1FTVWNqEW232r2LWa7RxI:xjvQAYBO+3BZFVHujW0EUhDI
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
-
Suspicious use of FindShellTrayWindow 11 IoCs
-
Suspicious use of SendNotifyMessage 10 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\CUFFED (ULTRA SLOWED).mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x3301⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe"1⤵
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe"1⤵
Network
-
DNS30.243.111.52.in-addr.arpaRemote address:8.8.8.8:53Request30.243.111.52.in-addr.arpaIN PTRResponse -
DNS252.15.104.51.in-addr.arpaRemote address:8.8.8.8:53Request252.15.104.51.in-addr.arpaIN PTRResponse
-
DNS172.214.232.199.in-addr.arpaRemote address:8.8.8.8:53Request172.214.232.199.in-addr.arpaIN PTRResponse
No results found
-
8.8.8.8:5330.243.111.52.in-addr.arpadns
DNS Request
30.243.111.52.in-addr.arpa
-
8.8.8.8:53252.15.104.51.in-addr.arpadns
DNS Request
252.15.104.51.in-addr.arpa
-
8.8.8.8:53172.214.232.199.in-addr.arpadns
DNS Request
172.214.232.199.in-addr.arpa
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
208KB
-
Filesize
992KB
-
Filesize
68KB
-
Filesize
116KB
-
Filesize
2.7MB
-
Filesize
68KB
-
Filesize
2.0MB
-
Filesize
92KB
-
Filesize
68KB
-
Filesize
92KB
-
Filesize
96KB
-
Filesize
108KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
96KB
-
Filesize
132KB
-
Filesize
260KB
-
Filesize
16.7MB
-
Filesize
16.7MB
-
Filesize
2.7MB
-
Filesize
16.7MB