Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
6Static
static
1Roblox-Mas...in.zip
windows7-x64
1Roblox-Mas...in.zip
windows10-2004-x64
15df42da4-c...dc.mp4
windows7-x64
15df42da4-c...dc.mp4
windows10-2004-x64
6Roblox-Mas...Ban.py
windows7-x64
3Roblox-Mas...Ban.py
windows10-2004-x64
3Roblox-Mas...DME.md
windows7-x64
3Roblox-Mas...DME.md
windows10-2004-x64
3Roblox-Mas...es.txt
windows7-x64
1Roblox-Mas...es.txt
windows10-2004-x64
3Roblox-Mas...ain.py
windows7-x64
3Roblox-Mas...ain.py
windows10-2004-x64
3Roblox-Mas...xy.txt
windows7-x64
1Roblox-Mas...xy.txt
windows10-2004-x64
1Roblox-Mas...up.bat
windows7-x64
1Roblox-Mas...up.bat
windows10-2004-x64
1Roblox-Mas...ts.txt
windows7-x64
1Roblox-Mas...ts.txt
windows10-2004-x64
1python-3.1...64.exe
windows7-x64
4python-3.1...64.exe
windows10-2004-x64
4Analysis
-
max time kernel
1190s -
max time network
845s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
11/09/2024, 19:16
Static task
static1
Behavioral task
behavioral1
Sample
Roblox-Mass-Report-main.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Roblox-Mass-Report-main.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
5df42da4-c2fc-4c88-b987-7b53c91958dc.mp4
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
5df42da4-c2fc-4c88-b987-7b53c91958dc.mp4
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Roblox-Mass-Report-main/RBXBan.py
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Roblox-Mass-Report-main/RBXBan.py
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Roblox-Mass-Report-main/README.md
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Roblox-Mass-Report-main/README.md
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Roblox-Mass-Report-main/cookies.txt
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Roblox-Mass-Report-main/cookies.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Roblox-Mass-Report-main/main.py
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Roblox-Mass-Report-main/main.py
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Roblox-Mass-Report-main/proxy.txt
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Roblox-Mass-Report-main/proxy.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Roblox-Mass-Report-main/setup.bat
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Roblox-Mass-Report-main/setup.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Roblox-Mass-Report-main/useragents.txt
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Roblox-Mass-Report-main/useragents.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
python-3.11.8-amd64.exe
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
python-3.11.8-amd64.exe
Resource
win10v2004-20240802-en
General
-
Target
5df42da4-c2fc-4c88-b987-7b53c91958dc.mp4
-
Size
6.8MB
-
MD5
f9c6fade0d8e712b80338b303a912ab6
-
SHA1
ba776164a624987acf084f0707b42c9ab46564ec
-
SHA256
807a27e3ea56dc1593874acfb622208e9a9966c80411f8608ce5425c2ec3cd0c
-
SHA512
e3833a1498598666951197a1da66babe13b31eec3552cb63ebdcec620708b581426082b4160ff2cd0d9446c39d1fef939c893e0e1897d2cd456051d14e129c24
-
SSDEEP
196608:Z/aU37CDScNEhMd3Zk4wScVr+rfbVhESiue3E05Pcfow377K8:Z+D9d3Zk4wVIjVhzJWsfx77K8
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2252 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2252 vlc.exe -
Suspicious use of FindShellTrayWindow 27 IoCs
pid Process 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe 2252 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2252 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\5df42da4-c2fc-4c88-b987-7b53c91958dc.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2252