Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    15s
  • max time network
    20s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    06/08/2024, 18:40

Errors

Reason
Machine shutdown

General

  • Target

    video_2024-08-05_15-12-58.mp4

  • Size

    1.3MB

  • MD5

    e29f47ddf88098795e197b0feb7e2eee

  • SHA1

    672ff5bd1af3ee5065ebcd4d3307e9c90604b28d

  • SHA256

    fd6f5d76ad0d4ad7e90d5c3f66780913e0bc5c9ae47fce7eff94264d61ea1bda

  • SHA512

    3a85d78e333b0fdf1de6977ee3cc59f06ad2e7b05373726b98512e7634d78953d4ab3d248dfa652e386ae8eaae7eb75d3ae5461550afb59fdc5b9f6f1e86b77b

  • SSDEEP

    24576:A+F+Bs5VzcVdRfyCFZAYrFWLu9eLUngzMwbE1B4q67rY9oP/DPod56VG:N/VzaF05eQtUWfYIUiG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 44 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\video_2024-08-05_15-12-58.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2756
  • C:\Windows\system32\LogonUI.exe
    "LogonUI.exe" /flags:0x0
    1⤵
      PID:992
    • C:\Windows\system32\LogonUI.exe
      "LogonUI.exe" /flags:0x1
      1⤵
        PID:2392

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/992-60-0x0000000002E10000-0x0000000002E11000-memory.dmp

        Filesize

        4KB

      • memory/2756-6-0x000007FEF6CC0000-0x000007FEF6CF4000-memory.dmp

        Filesize

        208KB

      • memory/2756-5-0x000000013F7F0000-0x000000013F8E8000-memory.dmp

        Filesize

        992KB

      • memory/2756-13-0x000007FEF66E0000-0x000007FEF66FD000-memory.dmp

        Filesize

        116KB

      • memory/2756-14-0x000007FEF6590000-0x000007FEF65A1000-memory.dmp

        Filesize

        68KB

      • memory/2756-12-0x000007FEF6700000-0x000007FEF6711000-memory.dmp

        Filesize

        68KB

      • memory/2756-11-0x000007FEF6B50000-0x000007FEF6B67000-memory.dmp

        Filesize

        92KB

      • memory/2756-10-0x000007FEF6B70000-0x000007FEF6B81000-memory.dmp

        Filesize

        68KB

      • memory/2756-9-0x000007FEF7A40000-0x000007FEF7A57000-memory.dmp

        Filesize

        92KB

      • memory/2756-7-0x000007FEF5FF0000-0x000007FEF62A6000-memory.dmp

        Filesize

        2.7MB

      • memory/2756-8-0x000007FEFAF30000-0x000007FEFAF48000-memory.dmp

        Filesize

        96KB

      • memory/2756-17-0x000007FEF6540000-0x000007FEF6581000-memory.dmp

        Filesize

        260KB

      • memory/2756-16-0x000007FEF4D30000-0x000007FEF4F3B000-memory.dmp

        Filesize

        2.0MB

      • memory/2756-18-0x000007FEF64A0000-0x000007FEF64C1000-memory.dmp

        Filesize

        132KB

      • memory/2756-19-0x000007FEF6480000-0x000007FEF6498000-memory.dmp

        Filesize

        96KB

      • memory/2756-20-0x000007FEF6460000-0x000007FEF6471000-memory.dmp

        Filesize

        68KB

      • memory/2756-21-0x000007FEF6440000-0x000007FEF6451000-memory.dmp

        Filesize

        68KB

      • memory/2756-22-0x000007FEF6420000-0x000007FEF6431000-memory.dmp

        Filesize

        68KB

      • memory/2756-23-0x000007FEF6400000-0x000007FEF641B000-memory.dmp

        Filesize

        108KB

      • memory/2756-24-0x000007FEF63E0000-0x000007FEF63F1000-memory.dmp

        Filesize

        68KB

      • memory/2756-25-0x000007FEF63C0000-0x000007FEF63D8000-memory.dmp

        Filesize

        96KB

      • memory/2756-26-0x000007FEF4D00000-0x000007FEF4D30000-memory.dmp

        Filesize

        192KB

      • memory/2756-27-0x000007FEF4C90000-0x000007FEF4CF7000-memory.dmp

        Filesize

        412KB

      • memory/2756-28-0x000007FEF4C10000-0x000007FEF4C8C000-memory.dmp

        Filesize

        496KB

      • memory/2756-15-0x000007FEF4F40000-0x000007FEF5FF0000-memory.dmp

        Filesize

        16.7MB

      • memory/2756-32-0x000007FEF49F0000-0x000007FEF4A07000-memory.dmp

        Filesize

        92KB

      • memory/2756-31-0x000007FEF4A10000-0x000007FEF4B90000-memory.dmp

        Filesize

        1.5MB

      • memory/2756-30-0x000007FEF4B90000-0x000007FEF4BE7000-memory.dmp

        Filesize

        348KB

      • memory/2756-29-0x000007FEF4BF0000-0x000007FEF4C01000-memory.dmp

        Filesize

        68KB

      • memory/2756-48-0x000007FEF2400000-0x000007FEF2423000-memory.dmp

        Filesize

        140KB

      • memory/2756-49-0x000007FEF23E0000-0x000007FEF23F2000-memory.dmp

        Filesize

        72KB

      • memory/2756-34-0x000007FEF2F70000-0x000007FEF3176000-memory.dmp

        Filesize

        2.0MB

      • memory/2756-47-0x000007FEF2430000-0x000007FEF2441000-memory.dmp

        Filesize

        68KB

      • memory/2756-51-0x000007FEF2240000-0x000007FEF2253000-memory.dmp

        Filesize

        76KB

      • memory/2756-52-0x000007FEF1F10000-0x000007FEF1F21000-memory.dmp

        Filesize

        68KB

      • memory/2756-54-0x000007FEF1E50000-0x000007FEF1E97000-memory.dmp

        Filesize

        284KB

      • memory/2756-56-0x000007FEF1C60000-0x000007FEF1C71000-memory.dmp

        Filesize

        68KB

      • memory/2756-58-0x000007FEEFD10000-0x000007FEEFD67000-memory.dmp

        Filesize

        348KB

      • memory/2756-59-0x000007FEEFC00000-0x000007FEEFC34000-memory.dmp

        Filesize

        208KB

      • memory/2756-57-0x000007FEEFD70000-0x000007FEEFDBE000-memory.dmp

        Filesize

        312KB

      • memory/2756-55-0x000007FEF1DD0000-0x000007FEF1E44000-memory.dmp

        Filesize

        464KB

      • memory/2756-53-0x000007FEF1EA0000-0x000007FEF1F01000-memory.dmp

        Filesize

        388KB

      • memory/2756-50-0x000007FEF2260000-0x000007FEF23DA000-memory.dmp

        Filesize

        1.5MB

      • memory/2756-46-0x000007FEF2470000-0x000007FEF2485000-memory.dmp

        Filesize

        84KB

      • memory/2756-45-0x000007FEF27D0000-0x000007FEF283D000-memory.dmp

        Filesize

        436KB

      • memory/2756-44-0x000007FEF2840000-0x000007FEF28A2000-memory.dmp

        Filesize

        392KB

      • memory/2756-43-0x000007FEF2D90000-0x000007FEF2DD2000-memory.dmp

        Filesize

        264KB

      • memory/2756-42-0x000007FEF28B0000-0x000007FEF2975000-memory.dmp

        Filesize

        788KB

      • memory/2756-41-0x000007FEF2DE0000-0x000007FEF2DF6000-memory.dmp

        Filesize

        88KB

      • memory/2756-40-0x000007FEF2E00000-0x000007FEF2E11000-memory.dmp

        Filesize

        68KB

      • memory/2756-39-0x000007FEF2E20000-0x000007FEF2E4F000-memory.dmp

        Filesize

        188KB

      • memory/2756-38-0x000007FEF6B40000-0x000007FEF6B50000-memory.dmp

        Filesize

        64KB

      • memory/2756-37-0x000007FEF2EB0000-0x000007FEF2EFD000-memory.dmp

        Filesize

        308KB

      • memory/2756-36-0x000007FEF2F00000-0x000007FEF2F42000-memory.dmp

        Filesize

        264KB

      • memory/2756-35-0x000007FEF2F50000-0x000007FEF2F62000-memory.dmp

        Filesize

        72KB

      • memory/2756-33-0x000007FEF3180000-0x000007FEF49EF000-memory.dmp

        Filesize

        24.4MB

      • memory/2756-63-0x000007FEF5FF0000-0x000007FEF62A6000-memory.dmp

        Filesize

        2.7MB