Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2024, 17:32

General

  • Target

    Re-Logic - Terraria Soundtrack - 01 Overworld Day.mp3

  • Size

    5.7MB

  • MD5

    256d635c2022057c4e4ac300f2ddf810

  • SHA1

    d174e7b77d1e64196ea0a947ea68ff4bbe0c303a

  • SHA256

    51faca3e7cb2e8d9d41350a1eaa874c6c7e925859c22d4c1fe2882dff3c85ed9

  • SHA512

    9d4c8dae941ffd3674460ef77e579a08374d61b29b56a5d1a3255a7288d9dfb364a27082783cf164e24f6c089c1a523ac8e78f63736828ddf65ed92f92e88f03

  • SSDEEP

    98304:9LBYMZtW4uBqB0mleXGDjeRYLL/hVV8W0bFTzy3l5hhSfFQHQU2oya:9LBzcBqBJeR8L/VO45XaFQhua

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Re-Logic - Terraria Soundtrack - 01 Overworld Day.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\vlc\art\artistalbum\Scott Lloyd Shelly\Terraria Soundtrack\art.jpg

    Filesize

    414KB

    MD5

    d36d0f0ccdd56794660db7e980f37c0a

    SHA1

    3424120c5ef52f299f1054a762959ed39b3792fb

    SHA256

    2ebc4de6977dba34225370df23c3999e5c9a7f0d081582ec0185c280ce419373

    SHA512

    0730be74267665b1d4bad6196d70195611cdf61ec1412d90c6a3c5f7da3fa3101e618ae7d40b3c9d8869ab4559c4527a31208f70c40797a21710e953ab7b05b7

  • memory/1812-58-0x000000013FE10000-0x000000013FF08000-memory.dmp

    Filesize

    992KB

  • memory/1812-59-0x000007FEF7CD0000-0x000007FEF7D04000-memory.dmp

    Filesize

    208KB

  • memory/1812-63-0x000007FEF7F90000-0x000007FEF7FA1000-memory.dmp

    Filesize

    68KB

  • memory/1812-66-0x000007FEF70E0000-0x000007FEF70FD000-memory.dmp

    Filesize

    116KB

  • memory/1812-64-0x000007FEF7CB0000-0x000007FEF7CC7000-memory.dmp

    Filesize

    92KB

  • memory/1812-65-0x000007FEF7100000-0x000007FEF7111000-memory.dmp

    Filesize

    68KB

  • memory/1812-62-0x000007FEFAEB0000-0x000007FEFAEC7000-memory.dmp

    Filesize

    92KB

  • memory/1812-67-0x000007FEF70C0000-0x000007FEF70D1000-memory.dmp

    Filesize

    68KB

  • memory/1812-61-0x000007FEFBBB0000-0x000007FEFBBC8000-memory.dmp

    Filesize

    96KB

  • memory/1812-60-0x000007FEF64C0000-0x000007FEF6776000-memory.dmp

    Filesize

    2.7MB

  • memory/1812-98-0x000007FEF3130000-0x000007FEF3141000-memory.dmp

    Filesize

    68KB

  • memory/1812-99-0x000007FEF30F0000-0x000007FEF3102000-memory.dmp

    Filesize

    72KB

  • memory/1812-97-0x000007FEF3150000-0x000007FEF3165000-memory.dmp

    Filesize

    84KB

  • memory/1812-100-0x000007FEF2F70000-0x000007FEF30EA000-memory.dmp

    Filesize

    1.5MB

  • memory/1812-96-0x000007FEF3170000-0x000007FEF31DD000-memory.dmp

    Filesize

    436KB

  • memory/1812-94-0x000007FEF3250000-0x000007FEF3292000-memory.dmp

    Filesize

    264KB

  • memory/1812-95-0x000007FEF31E0000-0x000007FEF3242000-memory.dmp

    Filesize

    392KB

  • memory/1812-92-0x000007FEFAEA0000-0x000007FEFAEB0000-memory.dmp

    Filesize

    64KB

  • memory/1812-93-0x000007FEF32A0000-0x000007FEF32B6000-memory.dmp

    Filesize

    88KB

  • memory/1812-90-0x000007FEF32F0000-0x000007FEF3318000-memory.dmp

    Filesize

    160KB

  • memory/1812-91-0x000007FEF32C0000-0x000007FEF32E4000-memory.dmp

    Filesize

    144KB

  • memory/1812-85-0x000007FEF50C0000-0x000007FEF5117000-memory.dmp

    Filesize

    348KB

  • memory/1812-89-0x000007FEF4F80000-0x000007FEF5045000-memory.dmp

    Filesize

    788KB

  • memory/1812-88-0x000007FEF5050000-0x000007FEF5061000-memory.dmp

    Filesize

    68KB

  • memory/1812-87-0x000007FEF5070000-0x000007FEF5083000-memory.dmp

    Filesize

    76KB

  • memory/1812-86-0x000007FEF5090000-0x000007FEF50BF000-memory.dmp

    Filesize

    188KB

  • memory/1812-84-0x000007FEF5120000-0x000007FEF5131000-memory.dmp

    Filesize

    68KB

  • memory/1812-83-0x000007FEF5140000-0x000007FEF5158000-memory.dmp

    Filesize

    96KB

  • memory/1812-81-0x000007FEF5180000-0x000007FEF51FC000-memory.dmp

    Filesize

    496KB

  • memory/1812-82-0x000007FEF5160000-0x000007FEF5171000-memory.dmp

    Filesize

    68KB

  • memory/1812-78-0x000007FEF6B90000-0x000007FEF6BA8000-memory.dmp

    Filesize

    96KB

  • memory/1812-80-0x000007FEF6AF0000-0x000007FEF6B57000-memory.dmp

    Filesize

    412KB

  • memory/1812-79-0x000007FEF6B60000-0x000007FEF6B90000-memory.dmp

    Filesize

    192KB

  • memory/1812-77-0x000007FEF6BB0000-0x000007FEF6BC1000-memory.dmp

    Filesize

    68KB

  • memory/1812-73-0x000007FEF6C30000-0x000007FEF6C41000-memory.dmp

    Filesize

    68KB

  • memory/1812-76-0x000007FEF6BD0000-0x000007FEF6BEB000-memory.dmp

    Filesize

    108KB

  • memory/1812-75-0x000007FEF6BF0000-0x000007FEF6C01000-memory.dmp

    Filesize

    68KB

  • memory/1812-74-0x000007FEF6C10000-0x000007FEF6C21000-memory.dmp

    Filesize

    68KB

  • memory/1812-72-0x000007FEF6C90000-0x000007FEF6CA8000-memory.dmp

    Filesize

    96KB

  • memory/1812-71-0x000007FEF7090000-0x000007FEF70B1000-memory.dmp

    Filesize

    132KB

  • memory/1812-70-0x000007FEF6CB0000-0x000007FEF6CF1000-memory.dmp

    Filesize

    260KB

  • memory/1812-69-0x000007FEF5200000-0x000007FEF540B000-memory.dmp

    Filesize

    2.0MB

  • memory/1812-68-0x000007FEF5410000-0x000007FEF64C0000-memory.dmp

    Filesize

    16.7MB