Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    23s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    26/01/2025, 10:45

General

  • Target

    bewm.mov

  • Size

    766KB

  • MD5

    2fe7334666b7da49de744e0f83f6b237

  • SHA1

    e0376277c4e788a6e51e20f78e27275a37af2b2b

  • SHA256

    b98f6794703b2327b9b72011950d8831b0323fc959c5ee5b8a31b90eea007334

  • SHA512

    deb8d4a66a82cf5bf9827ba76911d7cbbc0d5f44905ed137a2b558c30c2279a6a83f50f05b3e4fca957e557a5a02482fb9dd905ec10a06cbcc90af7c831c80e3

  • SSDEEP

    12288:HoQyN1mkXViCdZIKB1NSskgKycJse+UYnpcJHUzRc0DVrHL8i0zvtKX79/J8EB:HoQyrmkF7ZloXwcJszUYKUVBrHprkEB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 29 IoCs
  • Suspicious use of SendNotifyMessage 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\bewm.mov"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2220
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x458
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2220-6-0x000007FEFB1C0000-0x000007FEFB1F4000-memory.dmp

    Filesize

    208KB

  • memory/2220-5-0x000000013FD30000-0x000000013FE28000-memory.dmp

    Filesize

    992KB

  • memory/2220-10-0x000007FEFB1A0000-0x000007FEFB1B1000-memory.dmp

    Filesize

    68KB

  • memory/2220-13-0x000007FEFAF90000-0x000007FEFAFAD000-memory.dmp

    Filesize

    116KB

  • memory/2220-12-0x000007FEFB160000-0x000007FEFB171000-memory.dmp

    Filesize

    68KB

  • memory/2220-11-0x000007FEFB180000-0x000007FEFB197000-memory.dmp

    Filesize

    92KB

  • memory/2220-9-0x000007FEFB270000-0x000007FEFB287000-memory.dmp

    Filesize

    92KB

  • memory/2220-8-0x000007FEFB890000-0x000007FEFB8A8000-memory.dmp

    Filesize

    96KB

  • memory/2220-7-0x000007FEF7720000-0x000007FEF79D6000-memory.dmp

    Filesize

    2.7MB

  • memory/2220-15-0x000007FEFAF70000-0x000007FEFAF81000-memory.dmp

    Filesize

    68KB

  • memory/2220-18-0x000007FEFAED0000-0x000007FEFAEE8000-memory.dmp

    Filesize

    96KB

  • memory/2220-19-0x000007FEF7700000-0x000007FEF7711000-memory.dmp

    Filesize

    68KB

  • memory/2220-17-0x000007FEFAEF0000-0x000007FEFAF11000-memory.dmp

    Filesize

    132KB

  • memory/2220-14-0x000007FEF66E0000-0x000007FEF68EB000-memory.dmp

    Filesize

    2.0MB

  • memory/2220-16-0x000007FEFAF20000-0x000007FEFAF61000-memory.dmp

    Filesize

    260KB

  • memory/2220-22-0x000007FEF6B90000-0x000007FEF6BA1000-memory.dmp

    Filesize

    68KB

  • memory/2220-24-0x000007FEF6B50000-0x000007FEF6B61000-memory.dmp

    Filesize

    68KB

  • memory/2220-27-0x000007FEF6A90000-0x000007FEF6AF7000-memory.dmp

    Filesize

    412KB

  • memory/2220-30-0x000007FEF55B0000-0x000007FEF5607000-memory.dmp

    Filesize

    348KB

  • memory/2220-29-0x000007FEF5610000-0x000007FEF5621000-memory.dmp

    Filesize

    68KB

  • memory/2220-32-0x000007FEF5410000-0x000007FEF5427000-memory.dmp

    Filesize

    92KB

  • memory/2220-31-0x000007FEF5430000-0x000007FEF55B0000-memory.dmp

    Filesize

    1.5MB

  • memory/2220-28-0x000007FEF6A10000-0x000007FEF6A8C000-memory.dmp

    Filesize

    496KB

  • memory/2220-26-0x000007FEF6B00000-0x000007FEF6B30000-memory.dmp

    Filesize

    192KB

  • memory/2220-25-0x000007FEF6B30000-0x000007FEF6B48000-memory.dmp

    Filesize

    96KB

  • memory/2220-23-0x000007FEF6B70000-0x000007FEF6B8B000-memory.dmp

    Filesize

    108KB

  • memory/2220-21-0x000007FEF6BB0000-0x000007FEF6BC1000-memory.dmp

    Filesize

    68KB

  • memory/2220-20-0x000007FEF5630000-0x000007FEF66E0000-memory.dmp

    Filesize

    16.7MB

  • memory/2220-37-0x000007FEF38D0000-0x000007FEF391D000-memory.dmp

    Filesize

    308KB

  • memory/2220-36-0x000007FEF3920000-0x000007FEF3962000-memory.dmp

    Filesize

    264KB

  • memory/2220-35-0x000007FEF3970000-0x000007FEF3982000-memory.dmp

    Filesize

    72KB

  • memory/2220-38-0x000007FEF3760000-0x000007FEF38CB000-memory.dmp

    Filesize

    1.4MB

  • memory/2220-39-0x000007FEF3700000-0x000007FEF3757000-memory.dmp

    Filesize

    348KB

  • memory/2220-34-0x000007FEF3990000-0x000007FEF3B96000-memory.dmp

    Filesize

    2.0MB

  • memory/2220-44-0x000007FEF3440000-0x000007FEF3456000-memory.dmp

    Filesize

    88KB

  • memory/2220-47-0x000007FEF32B0000-0x000007FEF3312000-memory.dmp

    Filesize

    392KB

  • memory/2220-46-0x000007FEF3320000-0x000007FEF3362000-memory.dmp

    Filesize

    264KB

  • memory/2220-50-0x000007FEF3200000-0x000007FEF3214000-memory.dmp

    Filesize

    80KB

  • memory/2220-49-0x000007FEF3220000-0x000007FEF3233000-memory.dmp

    Filesize

    76KB

  • memory/2220-54-0x000007FEF2C70000-0x000007FEF2C83000-memory.dmp

    Filesize

    76KB

  • memory/2220-58-0x000007FEF27E0000-0x000007FEF27F2000-memory.dmp

    Filesize

    72KB

  • memory/2220-51-0x000007FEF2EE0000-0x000007FEF3190000-memory.dmp

    Filesize

    2.7MB

  • memory/2220-57-0x000007FEF2800000-0x000007FEF2811000-memory.dmp

    Filesize

    68KB

  • memory/2220-56-0x000007FEF2820000-0x000007FEF2831000-memory.dmp

    Filesize

    68KB

  • memory/2220-55-0x000007FEF2B60000-0x000007FEF2C66000-memory.dmp

    Filesize

    1.0MB

  • memory/2220-53-0x000007FEF2C90000-0x000007FEF2CB3000-memory.dmp

    Filesize

    140KB

  • memory/2220-52-0x000007FEF2CC0000-0x000007FEF2CD5000-memory.dmp

    Filesize

    84KB

  • memory/2220-60-0x000007FEF25F0000-0x000007FEF2651000-memory.dmp

    Filesize

    388KB

  • memory/2220-64-0x000007FEF20C0000-0x000007FEF210E000-memory.dmp

    Filesize

    312KB

  • memory/2220-66-0x000007FEF2020000-0x000007FEF2054000-memory.dmp

    Filesize

    208KB

  • memory/2220-65-0x000007FEF2060000-0x000007FEF20B7000-memory.dmp

    Filesize

    348KB

  • memory/2220-59-0x000007FEF2660000-0x000007FEF27DA000-memory.dmp

    Filesize

    1.5MB

  • memory/2220-63-0x000007FEF23B0000-0x000007FEF23C1000-memory.dmp

    Filesize

    68KB

  • memory/2220-62-0x000007FEF2520000-0x000007FEF2594000-memory.dmp

    Filesize

    464KB

  • memory/2220-61-0x000007FEF25A0000-0x000007FEF25E7000-memory.dmp

    Filesize

    284KB

  • memory/2220-33-0x000007FEF3BA0000-0x000007FEF540F000-memory.dmp

    Filesize

    24.4MB

  • memory/2220-48-0x000007FEF3240000-0x000007FEF32AD000-memory.dmp

    Filesize

    436KB

  • memory/2220-45-0x000007FEF3370000-0x000007FEF3435000-memory.dmp

    Filesize

    788KB

  • memory/2220-43-0x000007FEF3460000-0x000007FEF3471000-memory.dmp

    Filesize

    68KB

  • memory/2220-42-0x000007FEF3480000-0x000007FEF34AF000-memory.dmp

    Filesize

    188KB

  • memory/2220-41-0x000007FEFB220000-0x000007FEFB230000-memory.dmp

    Filesize

    64KB

  • memory/2220-40-0x000007FEF34B0000-0x000007FEF36F1000-memory.dmp

    Filesize

    2.3MB