Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2024, 17:32

General

  • Target

    Re-Logic - Terraria Soundtrack - 09 Underground Corruption.mp3

  • Size

    5.9MB

  • MD5

    3cf04c05f3bef9e34e41529f308c83f2

  • SHA1

    c3336cf78a1599eb3456aade7d6395ea0355d1c0

  • SHA256

    59327c3fd7705714c2af5a397a5bf0efedbda59189ff48bd07e418dedf797e01

  • SHA512

    ec7c7dd63c025ba3702a668c160000055c23bf7958a204ce4fb3af64b3db7f32a2dae7f2e194d2ab20a7ca2ea1dd9eaf7ac119e71796dcbea22947275a9a635a

  • SSDEEP

    98304:8LBYMZCiYumNWp+4eoEGVi/BTkALgfNBjZuL6Eq1hUC1qRA4MFWRz1DqqPh/NtVY:8LBMVs6DDL4AmEEhvq69MRzNqGpNtVSd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Re-Logic - Terraria Soundtrack - 09 Underground Corruption.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\vlc\art\artistalbum\Scott Lloyd Shelly\Terraria Soundtrack\art.jpg

    Filesize

    414KB

    MD5

    d36d0f0ccdd56794660db7e980f37c0a

    SHA1

    3424120c5ef52f299f1054a762959ed39b3792fb

    SHA256

    2ebc4de6977dba34225370df23c3999e5c9a7f0d081582ec0185c280ce419373

    SHA512

    0730be74267665b1d4bad6196d70195611cdf61ec1412d90c6a3c5f7da3fa3101e618ae7d40b3c9d8869ab4559c4527a31208f70c40797a21710e953ab7b05b7

  • memory/2084-60-0x000000013FF50000-0x0000000140048000-memory.dmp

    Filesize

    992KB

  • memory/2084-69-0x000007FEF6790000-0x000007FEF67A1000-memory.dmp

    Filesize

    68KB

  • memory/2084-70-0x000007FEF5F20000-0x000007FEF612B000-memory.dmp

    Filesize

    2.0MB

  • memory/2084-68-0x000007FEF67B0000-0x000007FEF67CD000-memory.dmp

    Filesize

    116KB

  • memory/2084-72-0x000007FEF6740000-0x000007FEF6781000-memory.dmp

    Filesize

    260KB

  • memory/2084-82-0x000007FEF4DB0000-0x000007FEF4E17000-memory.dmp

    Filesize

    412KB

  • memory/2084-96-0x000007FEF2CA0000-0x000007FEF2CB2000-memory.dmp

    Filesize

    72KB

  • memory/2084-95-0x000007FEF2CC0000-0x000007FEF2CD1000-memory.dmp

    Filesize

    68KB

  • memory/2084-97-0x000007FEF2B20000-0x000007FEF2C9A000-memory.dmp

    Filesize

    1.5MB

  • memory/2084-94-0x000007FEF2D00000-0x000007FEF2D15000-memory.dmp

    Filesize

    84KB

  • memory/2084-93-0x000007FEF2EA0000-0x000007FEF2EC8000-memory.dmp

    Filesize

    160KB

  • memory/2084-92-0x000007FEF2ED0000-0x000007FEF2F27000-memory.dmp

    Filesize

    348KB

  • memory/2084-91-0x000007FEF4B30000-0x000007FEF4BF5000-memory.dmp

    Filesize

    788KB

  • memory/2084-89-0x000007FEF4C20000-0x000007FEF4C33000-memory.dmp

    Filesize

    76KB

  • memory/2084-90-0x000007FEF4C00000-0x000007FEF4C11000-memory.dmp

    Filesize

    68KB

  • memory/2084-71-0x000007FEF4E70000-0x000007FEF5F20000-memory.dmp

    Filesize

    16.7MB

  • memory/2084-88-0x000007FEF4C40000-0x000007FEF4C6F000-memory.dmp

    Filesize

    188KB

  • memory/2084-87-0x000007FEF4C70000-0x000007FEF4CC7000-memory.dmp

    Filesize

    348KB

  • memory/2084-86-0x000007FEF4CD0000-0x000007FEF4CE1000-memory.dmp

    Filesize

    68KB

  • memory/2084-85-0x000007FEF4CF0000-0x000007FEF4D08000-memory.dmp

    Filesize

    96KB

  • memory/2084-84-0x000007FEF4D10000-0x000007FEF4D21000-memory.dmp

    Filesize

    68KB

  • memory/2084-83-0x000007FEF4D30000-0x000007FEF4DAC000-memory.dmp

    Filesize

    496KB

  • memory/2084-81-0x000007FEF4E20000-0x000007FEF4E50000-memory.dmp

    Filesize

    192KB

  • memory/2084-80-0x000007FEF4E50000-0x000007FEF4E68000-memory.dmp

    Filesize

    96KB

  • memory/2084-79-0x000007FEF6650000-0x000007FEF6661000-memory.dmp

    Filesize

    68KB

  • memory/2084-78-0x000007FEF6670000-0x000007FEF668B000-memory.dmp

    Filesize

    108KB

  • memory/2084-77-0x000007FEF6690000-0x000007FEF66A1000-memory.dmp

    Filesize

    68KB

  • memory/2084-76-0x000007FEF66B0000-0x000007FEF66C1000-memory.dmp

    Filesize

    68KB

  • memory/2084-75-0x000007FEF66D0000-0x000007FEF66E1000-memory.dmp

    Filesize

    68KB

  • memory/2084-74-0x000007FEF66F0000-0x000007FEF6708000-memory.dmp

    Filesize

    96KB

  • memory/2084-73-0x000007FEF6710000-0x000007FEF6731000-memory.dmp

    Filesize

    132KB

  • memory/2084-67-0x000007FEF6D60000-0x000007FEF6D71000-memory.dmp

    Filesize

    68KB

  • memory/2084-66-0x000007FEF6D80000-0x000007FEF6D97000-memory.dmp

    Filesize

    92KB

  • memory/2084-62-0x000007FEF6130000-0x000007FEF63E6000-memory.dmp

    Filesize

    2.7MB

  • memory/2084-65-0x000007FEF78F0000-0x000007FEF7901000-memory.dmp

    Filesize

    68KB

  • memory/2084-64-0x000007FEFB2F0000-0x000007FEFB307000-memory.dmp

    Filesize

    92KB

  • memory/2084-63-0x000007FEFB7C0000-0x000007FEFB7D8000-memory.dmp

    Filesize

    96KB

  • memory/2084-61-0x000007FEF6ED0000-0x000007FEF6F04000-memory.dmp

    Filesize

    208KB