Resubmissions
11/10/2022, 17:08
221011-vnmsrafbdn610/10/2022, 15:31
221010-syaj3acdb31009/10/2022, 15:59
221009-tfb6lshbg41009/10/2022, 15:28
221009-swtvxshceq1009/10/2022, 13:04
221009-qa2brshab71009/10/2022, 13:03
221009-qaj3gshab6109/10/2022, 12:59
221009-p8jnyahaa61009/10/2022, 12:54
221009-p5m7yshbdm1008/10/2022, 21:32
221008-1dxg4afgb81008/10/2022, 13:52
221008-q6p9daegh51Analysis
- max time kernel
50s - max time network
67s - platform
windows10-1703_x64 - resource
win10-20220901-en - resource tags
- submitted
11/10/2022, 17:08
General
- Target fucker script.exe
- Size 104KB
- Sample221011-vnmsrafbdn
- SHA256 52972a23ab12b95cd51d71741db2cf276749e56030c092e2e4f0907dcb1fbd56
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 5 IoCs
- Suspicious use of SendNotifyMessage 2 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fucker script.exe"C:\Users\Admin\AppData\Local\Temp\fucker script.exe"1⤵
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4544-120-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-121-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-122-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-123-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-124-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-125-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-126-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-127-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-128-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-129-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-130-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-131-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-132-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-133-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-134-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-135-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-136-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-138-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-137-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-139-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-140-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-141-0x0000000077340000-0x00000000774CE000-memory.dmp
memory/4544-142-0x0000000077340000-0x00000000774CE000-memory.dmp