Analysis
-
max time kernel
141s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
15/03/2023, 20:39
Static task
static1
Behavioral task
behavioral1
Sample
Mega Man X5 (USA).7z
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Mega Man X5 (USA).7z
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
Mega Man X5 (USA).bin
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Mega Man X5 (USA).bin
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Mega Man X5 (USA).cue
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Mega Man X5 (USA).cue
Resource
win10v2004-20230220-en
General
-
Target
Mega Man X5 (USA).cue
-
Size
83B
-
MD5
5fa6d227c33a7054da6d174b042b94f6
-
SHA1
4e77f47c71641f6016a5fc49cc5f5d372ae71745
-
SHA256
37c2ef545c4d7367315d6ff173d2a1a82404a4a6c87380f4ee107287e80f0bf1
-
SHA512
8ef2c554fa9a61aa645a59dfdf95dd9be2355c0622895bea8be1d59f7009b482ec36482c0717aada780917f8adddff77ec7450e8bb140d412cf4c8b0b8efecd4
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4780 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4780 vlc.exe -
Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 4780 vlc.exe 4780 vlc.exe 4780 vlc.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 4780 vlc.exe 4780 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4780 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Mega Man X5 (USA).cue"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4780