Analysis
-
max time kernel
27s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
07-02-2023 05:13
General
-
Target
y2mate.com - Two Good Happy Moment Extended Version_320kbps.mp3
-
Size
12.5MB
-
MD5
e75865a6a38f862d545a4bacebaa08cf
-
SHA1
a2b7776274b545e54c299a2cad7107af81f7bc1b
-
SHA256
da5a92c0a1097036f0ede7df576fa43ff2f433d0fe5c1ff53b2862bfd55fb0e6
-
SHA512
cf9622ed09920f5a9a3bfb8d756628ddcc907ae3fb43cf3899120991cc428bd1e5ccd5a8a12dfc89c7cb872af33cbe9c1deb1e3ac3276f9d1adbecffaa8a4541
-
SSDEEP
196608:8sHPcXwV+Gp4wPr4G4kjZHe8BSeI1z6q7fVYCr/V0ouLIob/zmm+T:8yPck1jZAdz6q7fTbV0oI/q
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 6 IoCs
-
Suspicious use of FindShellTrayWindow 7 IoCs
-
Suspicious use of SendNotifyMessage 6 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\y2mate.com - Two Good Happy Moment Extended Version_320kbps.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x55c1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB