Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2024, 11:49

General

  • Target

    game/bgm/end-voice_ru.ogg

  • Size

    469KB

  • MD5

    c477f88395e4cec3fada2f32e1b3a351

  • SHA1

    fc896e0c455e9b14965eb20b1f4959d0cb983c15

  • SHA256

    dc9585119b4265e1b1a02d7d2af85041b8c76de9768552bf6565e8c38aee7ffc

  • SHA512

    1ff0639055e7b59afa3ee3a75940c7d3481162083b79bb2663e770152d439d174e1a54480a86dad669780d3ea70bbff2123d95389e1f0318567a82df877512f1

  • SSDEEP

    12288:r7sgA5JJJiFjJ3E2/3NdGy2xKREg5hwyo0Ztvx:r7sgA5J3iFjJ3Cy2xKRb5uyRZ1x

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\game\bgm\end-voice_ru.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:3036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3036-6-0x000007FEF7AD0000-0x000007FEF7B04000-memory.dmp

    Filesize

    208KB

  • memory/3036-5-0x000000013F070000-0x000000013F168000-memory.dmp

    Filesize

    992KB

  • memory/3036-13-0x000007FEF6F70000-0x000007FEF6F8D000-memory.dmp

    Filesize

    116KB

  • memory/3036-14-0x000007FEF6F50000-0x000007FEF6F61000-memory.dmp

    Filesize

    68KB

  • memory/3036-12-0x000007FEF6F90000-0x000007FEF6FA1000-memory.dmp

    Filesize

    68KB

  • memory/3036-11-0x000007FEF7AB0000-0x000007FEF7AC7000-memory.dmp

    Filesize

    92KB

  • memory/3036-10-0x000007FEF7D90000-0x000007FEF7DA1000-memory.dmp

    Filesize

    68KB

  • memory/3036-9-0x000007FEFACB0000-0x000007FEFACC7000-memory.dmp

    Filesize

    92KB

  • memory/3036-7-0x000007FEF62E0000-0x000007FEF6596000-memory.dmp

    Filesize

    2.7MB

  • memory/3036-8-0x000007FEFB9E0000-0x000007FEFB9F8000-memory.dmp

    Filesize

    96KB

  • memory/3036-26-0x000007FEF6960000-0x000007FEF6990000-memory.dmp

    Filesize

    192KB

  • memory/3036-25-0x000007FEF6990000-0x000007FEF69A8000-memory.dmp

    Filesize

    96KB

  • memory/3036-24-0x000007FEF69B0000-0x000007FEF69C1000-memory.dmp

    Filesize

    68KB

  • memory/3036-23-0x000007FEF69D0000-0x000007FEF69EB000-memory.dmp

    Filesize

    108KB

  • memory/3036-22-0x000007FEF69F0000-0x000007FEF6A01000-memory.dmp

    Filesize

    68KB

  • memory/3036-39-0x000007FEF4B90000-0x000007FEF4BA2000-memory.dmp

    Filesize

    72KB

  • memory/3036-38-0x000007FEF4BB0000-0x000007FEF4BC1000-memory.dmp

    Filesize

    68KB

  • memory/3036-37-0x000007FEF4C10000-0x000007FEF4CD5000-memory.dmp

    Filesize

    788KB

  • memory/3036-40-0x000007FEF4A10000-0x000007FEF4B8A000-memory.dmp

    Filesize

    1.5MB

  • memory/3036-36-0x000007FEF4CE0000-0x000007FEF4CF6000-memory.dmp

    Filesize

    88KB

  • memory/3036-15-0x000007FEF5230000-0x000007FEF62E0000-memory.dmp

    Filesize

    16.7MB

  • memory/3036-16-0x000007FEF5020000-0x000007FEF522B000-memory.dmp

    Filesize

    2.0MB

  • memory/3036-35-0x000007FEF4D00000-0x000007FEF4D11000-memory.dmp

    Filesize

    68KB

  • memory/3036-34-0x000007FEF4D20000-0x000007FEF4D4F000-memory.dmp

    Filesize

    188KB

  • memory/3036-33-0x000007FEFACA0000-0x000007FEFACB0000-memory.dmp

    Filesize

    64KB

  • memory/3036-32-0x000007FEF6920000-0x000007FEF6937000-memory.dmp

    Filesize

    92KB

  • memory/3036-31-0x000007FEF4D50000-0x000007FEF4ED0000-memory.dmp

    Filesize

    1.5MB

  • memory/3036-30-0x000007FEF4ED0000-0x000007FEF4F2C000-memory.dmp

    Filesize

    368KB

  • memory/3036-29-0x000007FEF6940000-0x000007FEF6951000-memory.dmp

    Filesize

    68KB

  • memory/3036-28-0x000007FEF4F30000-0x000007FEF4FAC000-memory.dmp

    Filesize

    496KB

  • memory/3036-27-0x000007FEF4FB0000-0x000007FEF5017000-memory.dmp

    Filesize

    412KB

  • memory/3036-21-0x000007FEF6A10000-0x000007FEF6A21000-memory.dmp

    Filesize

    68KB

  • memory/3036-20-0x000007FEF6A30000-0x000007FEF6A41000-memory.dmp

    Filesize

    68KB

  • memory/3036-19-0x000007FEF6A50000-0x000007FEF6A68000-memory.dmp

    Filesize

    96KB

  • memory/3036-18-0x000007FEF6F20000-0x000007FEF6F41000-memory.dmp

    Filesize

    132KB

  • memory/3036-17-0x000007FEF6A70000-0x000007FEF6AB1000-memory.dmp

    Filesize

    260KB

  • memory/3036-43-0x000007FEF62E0000-0x000007FEF6596000-memory.dmp

    Filesize

    2.7MB