Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

26/07/2024, 18:28

240726-w4pgyszeje 7

26/07/2024, 18:14

240726-wvc3kawbml 7

Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    26/07/2024, 18:28

General

  • Target

    !#Fileş_#!UŞe~Passw0rd__~.~260717~.~__.zip

  • Size

    15.4MB

  • MD5

    5be5cdf1f9a125f3398510fcca2d301a

  • SHA1

    481dec7f1b70c0a914397a3368a82266c839c7c6

  • SHA256

    78f03756220d71d6e16b2e7a8a8ee4af46aa61d79e356554c44cf2524e00961b

  • SHA512

    71c4a651f45150d3ec6069aca910e829d1da338e70e304f996920c69713fc8273038f11ca3539dd72c47a555d6087120927fc99873c42ca345baaa011ab33bcd

  • SSDEEP

    393216:2WsTINy65o1Y/SLXsIS9DNltswcMwFpqMZ8UMFxZQrDur:UVuKLXYdSwpwFpIUMFnQrKr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\!#Fileş_#!UŞe~Passw0rd__~.~260717~.~__.zip
    1⤵
      PID:1700
    • C:\Program Files\VideoLAN\VLC\vlc.exe
      "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\InstallStep.wvx"
      1⤵
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      PID:2188
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      1⤵
        PID:2756

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2188-12-0x000000013F690000-0x000000013F788000-memory.dmp

        Filesize

        992KB

      • memory/2188-13-0x000007FEF7120000-0x000007FEF7154000-memory.dmp

        Filesize

        208KB

      • memory/2188-14-0x000007FEF5910000-0x000007FEF5BC6000-memory.dmp

        Filesize

        2.7MB

      • memory/2188-16-0x000007FEF3500000-0x000007FEF360E000-memory.dmp

        Filesize

        1.1MB

      • memory/2188-15-0x000007FEF4860000-0x000007FEF5910000-memory.dmp

        Filesize

        16.7MB