Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2024, 17:32

General

  • Target

    Re-Logic - Terraria Soundtrack - 05 Underground.mp3

  • Size

    7.3MB

  • MD5

    30edb003661a6112e976de0630655c68

  • SHA1

    637bb31b86d2527c95373882c77563a12770d4b4

  • SHA256

    d53fe845a597521c042594820a921e80889a18ef8d4426876c113a44955245f3

  • SHA512

    380dbb8b422f81431e51993b65c6d0e3d61517808666e1c1ddefeab97277dba41e32ec8482953716fb1f0c8e916d0d1e9aed725a1ecb2543c1cbdc34b2670c00

  • SSDEEP

    196608:TLBOISpyB3ZhJKTUSy1ud3uysGePzW08XV9hCnar:TLsjoBpGISRsGe7W00fr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Re-Logic - Terraria Soundtrack - 05 Underground.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\vlc\art\artistalbum\Scott Lloyd Shelly\Terraria Soundtrack\art.jpg

    Filesize

    414KB

    MD5

    d36d0f0ccdd56794660db7e980f37c0a

    SHA1

    3424120c5ef52f299f1054a762959ed39b3792fb

    SHA256

    2ebc4de6977dba34225370df23c3999e5c9a7f0d081582ec0185c280ce419373

    SHA512

    0730be74267665b1d4bad6196d70195611cdf61ec1412d90c6a3c5f7da3fa3101e618ae7d40b3c9d8869ab4559c4527a31208f70c40797a21710e953ab7b05b7

  • memory/1832-44-0x000007FEFB6B0000-0x000007FEFB6E4000-memory.dmp

    Filesize

    208KB

  • memory/1832-43-0x000000013F5F0000-0x000000013F6E8000-memory.dmp

    Filesize

    992KB

  • memory/1832-47-0x000007FEF7EB0000-0x000007FEF7EC7000-memory.dmp

    Filesize

    92KB

  • memory/1832-51-0x000007FEF7C90000-0x000007FEF7CAD000-memory.dmp

    Filesize

    116KB

  • memory/1832-45-0x000007FEF65B0000-0x000007FEF6866000-memory.dmp

    Filesize

    2.7MB

  • memory/1832-52-0x000007FEF7C70000-0x000007FEF7C81000-memory.dmp

    Filesize

    68KB

  • memory/1832-50-0x000007FEF7CB0000-0x000007FEF7CC1000-memory.dmp

    Filesize

    68KB

  • memory/1832-49-0x000007FEF7CD0000-0x000007FEF7CE7000-memory.dmp

    Filesize

    92KB

  • memory/1832-48-0x000007FEF7E90000-0x000007FEF7EA1000-memory.dmp

    Filesize

    68KB

  • memory/1832-46-0x000007FEFB700000-0x000007FEFB718000-memory.dmp

    Filesize

    96KB

  • memory/1832-53-0x000007FEF63A0000-0x000007FEF65AB000-memory.dmp

    Filesize

    2.0MB

  • memory/1832-55-0x000007FEF7C20000-0x000007FEF7C61000-memory.dmp

    Filesize

    260KB

  • memory/1832-59-0x000007FEF6F20000-0x000007FEF6F31000-memory.dmp

    Filesize

    68KB

  • memory/1832-58-0x000007FEF6F40000-0x000007FEF6F51000-memory.dmp

    Filesize

    68KB

  • memory/1832-57-0x000007FEF6F60000-0x000007FEF6F78000-memory.dmp

    Filesize

    96KB

  • memory/1832-65-0x000007FEF6280000-0x000007FEF62E7000-memory.dmp

    Filesize

    412KB

  • memory/1832-76-0x000007FEF6090000-0x000007FEF60A1000-memory.dmp

    Filesize

    68KB

  • memory/1832-77-0x000007FEF3270000-0x000007FEF32C7000-memory.dmp

    Filesize

    348KB

  • memory/1832-80-0x000007FEF3060000-0x000007FEF3072000-memory.dmp

    Filesize

    72KB

  • memory/1832-74-0x000007FEF4EC0000-0x000007FEF4F85000-memory.dmp

    Filesize

    788KB

  • memory/1832-79-0x000007FEF3080000-0x000007FEF3091000-memory.dmp

    Filesize

    68KB

  • memory/1832-78-0x000007FEF3240000-0x000007FEF3268000-memory.dmp

    Filesize

    160KB

  • memory/1832-75-0x000007FEF60B0000-0x000007FEF60C3000-memory.dmp

    Filesize

    76KB

  • memory/1832-54-0x000007FEF4F90000-0x000007FEF6040000-memory.dmp

    Filesize

    16.7MB

  • memory/1832-72-0x000007FEF60F0000-0x000007FEF6103000-memory.dmp

    Filesize

    76KB

  • memory/1832-71-0x000007FEF6110000-0x000007FEF613F000-memory.dmp

    Filesize

    188KB

  • memory/1832-70-0x000007FEF6140000-0x000007FEF6197000-memory.dmp

    Filesize

    348KB

  • memory/1832-68-0x000007FEF61C0000-0x000007FEF61D8000-memory.dmp

    Filesize

    96KB

  • memory/1832-67-0x000007FEF61E0000-0x000007FEF61F1000-memory.dmp

    Filesize

    68KB

  • memory/1832-66-0x000007FEF6200000-0x000007FEF627C000-memory.dmp

    Filesize

    496KB

  • memory/1832-81-0x000007FEF2EE0000-0x000007FEF305A000-memory.dmp

    Filesize

    1.5MB

  • memory/1832-64-0x000007FEF62F0000-0x000007FEF6320000-memory.dmp

    Filesize

    192KB

  • memory/1832-73-0x000007FEF60D0000-0x000007FEF60E1000-memory.dmp

    Filesize

    68KB

  • memory/1832-63-0x000007FEF6320000-0x000007FEF6338000-memory.dmp

    Filesize

    96KB

  • memory/1832-62-0x000007FEF6340000-0x000007FEF6351000-memory.dmp

    Filesize

    68KB

  • memory/1832-61-0x000007FEF6360000-0x000007FEF637B000-memory.dmp

    Filesize

    108KB

  • memory/1832-69-0x000007FEF61A0000-0x000007FEF61B1000-memory.dmp

    Filesize

    68KB

  • memory/1832-60-0x000007FEF6380000-0x000007FEF6391000-memory.dmp

    Filesize

    68KB

  • memory/1832-56-0x000007FEF6F80000-0x000007FEF6FA1000-memory.dmp

    Filesize

    132KB