Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
15s -
max time network
20s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
06/08/2024, 18:40
Static task
static1
Behavioral task
behavioral1
Sample
video_2024-08-05_15-12-58.mp4
Resource
win7-20240729-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
video_2024-08-05_15-12-58.mp4
Resource
win10v2004-20240802-en
8 signatures
150 seconds
Errors
Reason
Machine shutdown
General
-
Target
video_2024-08-05_15-12-58.mp4
-
Size
1.3MB
-
MD5
e29f47ddf88098795e197b0feb7e2eee
-
SHA1
672ff5bd1af3ee5065ebcd4d3307e9c90604b28d
-
SHA256
fd6f5d76ad0d4ad7e90d5c3f66780913e0bc5c9ae47fce7eff94264d61ea1bda
-
SHA512
3a85d78e333b0fdf1de6977ee3cc59f06ad2e7b05373726b98512e7634d78953d4ab3d248dfa652e386ae8eaae7eb75d3ae5461550afb59fdc5b9f6f1e86b77b
-
SSDEEP
24576:A+F+Bs5VzcVdRfyCFZAYrFWLu9eLUngzMwbE1B4q67rY9oP/DPod56VG:N/VzaF05eQtUWfYIUiG
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2756 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2756 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2756 vlc.exe Token: SeIncBasePriorityPrivilege 2756 vlc.exe -
Suspicious use of FindShellTrayWindow 44 IoCs
pid Process 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe -
Suspicious use of SendNotifyMessage 6 IoCs
pid Process 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2756 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\video_2024-08-05_15-12-58.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2756
-
C:\Windows\system32\LogonUI.exe"LogonUI.exe" /flags:0x01⤵PID:992
-
C:\Windows\system32\LogonUI.exe"LogonUI.exe" /flags:0x11⤵PID:2392