Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

02/09/2024, 19:47

240902-yhtwnawbqm 8

02/09/2024, 19:44

240902-yf71haxbmd 6

02/09/2024, 16:42

240902-t7z2ravemf 6

02/09/2024, 04:27

240902-e28pda1gjm 6

02/09/2024, 04:25

240902-e2agks1fqp 6

02/09/2024, 04:23

240902-ez6f8ssepa 6

02/09/2024, 04:20

240902-eydd3asela 6

24/08/2024, 02:54

240824-dd53xashql 10

Analysis

  • max time kernel
    140s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    02/09/2024, 19:44

General

  • Target

    sticking-out-your-gyatt-for-the-rizzler.mp3

  • Size

    175KB

  • MD5

    27b535b4401ff51e152ef5f6fdaa2b5c

  • SHA1

    eec3bba56eae9ff73d527c3638f3515d1c60da9b

  • SHA256

    1381fa3fc79389ad8e9c2f4acffda477c4b5c6e45a07fec9de523de30ee9efa8

  • SHA512

    9e322aef6c0c41f16fd0e101b89766032240570addba1a3be77b48207bc60c50a9ec3fbe82da9925d8d878ef111b625e629c05ee3dc23e30df10f8c523c8515e

  • SSDEEP

    3072:nU/Sk+yOMHjhLbJdTJ/ffFFxEuy1hqFXNQlPgoTzS+GpQE4pCUW4hkFTMRsHeV8L:nUK1yTdLbJrXPxEuy1jFJkpaxBV6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\sticking-out-your-gyatt-for-the-rizzler.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2412-6-0x000007FEF8870000-0x000007FEF88A4000-memory.dmp

    Filesize

    208KB

  • memory/2412-5-0x000000013FFE0000-0x00000001400D8000-memory.dmp

    Filesize

    992KB

  • memory/2412-13-0x000007FEF86A0000-0x000007FEF86BD000-memory.dmp

    Filesize

    116KB

  • memory/2412-14-0x000007FEF8680000-0x000007FEF8691000-memory.dmp

    Filesize

    68KB

  • memory/2412-12-0x000007FEF86C0000-0x000007FEF86D1000-memory.dmp

    Filesize

    68KB

  • memory/2412-11-0x000007FEF86E0000-0x000007FEF86F7000-memory.dmp

    Filesize

    92KB

  • memory/2412-10-0x000007FEF8700000-0x000007FEF8711000-memory.dmp

    Filesize

    68KB

  • memory/2412-9-0x000007FEF8720000-0x000007FEF8737000-memory.dmp

    Filesize

    92KB

  • memory/2412-8-0x000007FEFBC60000-0x000007FEFBC78000-memory.dmp

    Filesize

    96KB

  • memory/2412-7-0x000007FEF7320000-0x000007FEF75D6000-memory.dmp

    Filesize

    2.7MB

  • memory/2412-24-0x000007FEF7B60000-0x000007FEF7B71000-memory.dmp

    Filesize

    68KB

  • memory/2412-23-0x000007FEF7B80000-0x000007FEF7B9B000-memory.dmp

    Filesize

    108KB

  • memory/2412-35-0x000007FEF5F10000-0x000007FEF5F21000-memory.dmp

    Filesize

    68KB

  • memory/2412-29-0x000007FEF7A80000-0x000007FEF7A91000-memory.dmp

    Filesize

    68KB

  • memory/2412-37-0x000007FEF41C0000-0x000007FEF4217000-memory.dmp

    Filesize

    348KB

  • memory/2412-41-0x000007FEF3F90000-0x000007FEF3FA2000-memory.dmp

    Filesize

    72KB

  • memory/2412-40-0x000007FEF3FD0000-0x000007FEF3FE1000-memory.dmp

    Filesize

    68KB

  • memory/2412-39-0x000007FEF3FF0000-0x000007FEF4005000-memory.dmp

    Filesize

    84KB

  • memory/2412-38-0x000007FEF4190000-0x000007FEF41B8000-memory.dmp

    Filesize

    160KB

  • memory/2412-36-0x000007FEF5E40000-0x000007FEF5F05000-memory.dmp

    Filesize

    788KB

  • memory/2412-34-0x000007FEF5F30000-0x000007FEF5F43000-memory.dmp

    Filesize

    76KB

  • memory/2412-33-0x000007FEF5F50000-0x000007FEF5F7F000-memory.dmp

    Filesize

    188KB

  • memory/2412-32-0x000007FEF5F80000-0x000007FEF5FD7000-memory.dmp

    Filesize

    348KB

  • memory/2412-31-0x000007FEF7A40000-0x000007FEF7A51000-memory.dmp

    Filesize

    68KB

  • memory/2412-30-0x000007FEF7A60000-0x000007FEF7A78000-memory.dmp

    Filesize

    96KB

  • memory/2412-28-0x000007FEF5FE0000-0x000007FEF605C000-memory.dmp

    Filesize

    496KB

  • memory/2412-42-0x000007FEF3E10000-0x000007FEF3F8A000-memory.dmp

    Filesize

    1.5MB

  • memory/2412-27-0x000007FEF7AA0000-0x000007FEF7B07000-memory.dmp

    Filesize

    412KB

  • memory/2412-26-0x000007FEF7B10000-0x000007FEF7B40000-memory.dmp

    Filesize

    192KB

  • memory/2412-25-0x000007FEF7B40000-0x000007FEF7B58000-memory.dmp

    Filesize

    96KB

  • memory/2412-15-0x000007FEF6270000-0x000007FEF7320000-memory.dmp

    Filesize

    16.7MB

  • memory/2412-16-0x000007FEF6060000-0x000007FEF626B000-memory.dmp

    Filesize

    2.0MB

  • memory/2412-22-0x000007FEF7BA0000-0x000007FEF7BB1000-memory.dmp

    Filesize

    68KB

  • memory/2412-21-0x000007FEF7BC0000-0x000007FEF7BD1000-memory.dmp

    Filesize

    68KB

  • memory/2412-20-0x000007FEF7BE0000-0x000007FEF7BF1000-memory.dmp

    Filesize

    68KB

  • memory/2412-19-0x000007FEF85E0000-0x000007FEF85F8000-memory.dmp

    Filesize

    96KB

  • memory/2412-18-0x000007FEF8600000-0x000007FEF8621000-memory.dmp

    Filesize

    132KB

  • memory/2412-17-0x000007FEF8630000-0x000007FEF8671000-memory.dmp

    Filesize

    260KB

  • memory/2412-45-0x000007FEF7320000-0x000007FEF75D6000-memory.dmp

    Filesize

    2.7MB