Overview
overview
6Static
static
1Chica Videos.rar
windows7-x64
3Chica Videos.rar
windows10-2004-x64
3Chica Vide...p1.wmv
windows7-x64
1Chica Vide...p1.wmv
windows10-2004-x64
6Chica Vide...p2.wmv
windows7-x64
1Chica Vide...p2.wmv
windows10-2004-x64
6Chica Videos/cum.wmv
windows7-x64
1Chica Videos/cum.wmv
windows10-2004-x64
6Chica Vide...hj.wmv
windows7-x64
1Chica Vide...hj.wmv
windows10-2004-x64
6Chica Videos/idle.wmv
windows7-x64
1Chica Videos/idle.wmv
windows10-2004-x64
6Chica Vide...ro.wmv
windows7-x64
1Chica Vide...ro.wmv
windows10-2004-x64
6Chica Videos/lift.wmv
windows7-x64
1Chica Videos/lift.wmv
windows10-2004-x64
6Chica Vide...on.wmv
windows7-x64
1Chica Vide...on.wmv
windows10-2004-x64
6Chica Vide...le.wmv
windows7-x64
1Chica Vide...le.wmv
windows10-2004-x64
6Analysis
-
max time kernel
142s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
24/03/2023, 22:38
Static task
static1
Behavioral task
behavioral1
Sample
Chica Videos.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Chica Videos.rar
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
Chica Videos/chicarap1.wmv
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Chica Videos/chicarap1.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Chica Videos/chicarap2.wmv
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Chica Videos/chicarap2.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Chica Videos/cum.wmv
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Chica Videos/cum.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
Chica Videos/idle hj.wmv
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
Chica Videos/idle hj.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
Chica Videos/idle.wmv
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
Chica Videos/idle.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
Chica Videos/intro.wmv
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
Chica Videos/intro.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
Chica Videos/lift.wmv
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
Chica Videos/lift.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
Chica Videos/mission.wmv
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
Chica Videos/mission.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
Chica Videos/table.wmv
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
Chica Videos/table.wmv
Resource
win10v2004-20230221-en
General
-
Target
Chica Videos/mission.wmv
-
Size
6.0MB
-
MD5
5a917f31fa376e0ab578427daf32a367
-
SHA1
bc8dd1afb222d35c45d76ebcb46b8a742a6f0a3c
-
SHA256
07c4da6afc3ef02ed822beafaa316c52ea6eb034a99e70a56cf3932c669fe984
-
SHA512
58dd3ddeea9c5cc179282fe0027a9e399e547632b5677af488741cd2e87374a0dfad0d001565ce9c8009a4e8912c1701baa203dab857422658c7fca7f95a497a
-
SSDEEP
98304:JTyCv1lkb7rI2u4sHj6Gx6fBnJJSqWkpAsmt90DxDU09mTjmKaqm5oZawHLDJjl3:H9lUq6rxfSqB6bt90NfUTgqm5ocw1WIn
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1724 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1724 vlc.exe -
Suspicious use of AdjustPrivilegeToken 6 IoCs
description pid Process Token: 33 1760 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 1760 AUDIODG.EXE Token: 33 1760 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 1760 AUDIODG.EXE Token: 33 1724 vlc.exe Token: SeIncBasePriorityPrivilege 1724 vlc.exe -
Suspicious use of FindShellTrayWindow 49 IoCs
pid Process 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe -
Suspicious use of SendNotifyMessage 9 IoCs
pid Process 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe 1724 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1724 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Chica Videos\mission.wmv"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1724
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x5681⤵
- Suspicious use of AdjustPrivilegeToken
PID:1760