Overview
overview
6Static
static
1Chica Videos.rar
windows7-x64
3Chica Videos.rar
windows10-2004-x64
3Chica Vide...p1.wmv
windows7-x64
1Chica Vide...p1.wmv
windows10-2004-x64
6Chica Vide...p2.wmv
windows7-x64
1Chica Vide...p2.wmv
windows10-2004-x64
6Chica Videos/cum.wmv
windows7-x64
1Chica Videos/cum.wmv
windows10-2004-x64
6Chica Vide...hj.wmv
windows7-x64
1Chica Vide...hj.wmv
windows10-2004-x64
6Chica Videos/idle.wmv
windows7-x64
1Chica Videos/idle.wmv
windows10-2004-x64
6Chica Vide...ro.wmv
windows7-x64
1Chica Vide...ro.wmv
windows10-2004-x64
6Chica Videos/lift.wmv
windows7-x64
1Chica Videos/lift.wmv
windows10-2004-x64
6Chica Vide...on.wmv
windows7-x64
1Chica Vide...on.wmv
windows10-2004-x64
6Chica Vide...le.wmv
windows7-x64
1Chica Vide...le.wmv
windows10-2004-x64
6Analysis
-
max time kernel
141s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
24/03/2023, 22:38
Static task
static1
Behavioral task
behavioral1
Sample
Chica Videos.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Chica Videos.rar
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
Chica Videos/chicarap1.wmv
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Chica Videos/chicarap1.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Chica Videos/chicarap2.wmv
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Chica Videos/chicarap2.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Chica Videos/cum.wmv
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Chica Videos/cum.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
Chica Videos/idle hj.wmv
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
Chica Videos/idle hj.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
Chica Videos/idle.wmv
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
Chica Videos/idle.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
Chica Videos/intro.wmv
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
Chica Videos/intro.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
Chica Videos/lift.wmv
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
Chica Videos/lift.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
Chica Videos/mission.wmv
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
Chica Videos/mission.wmv
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
Chica Videos/table.wmv
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
Chica Videos/table.wmv
Resource
win10v2004-20230221-en
General
-
Target
Chica Videos/chicarap2.wmv
-
Size
1.8MB
-
MD5
c8b63ee4ada46bc4bbe5ac6d1c8bca3c
-
SHA1
90617f7c2de3cddb0272b67acf965f50d2564e8b
-
SHA256
3ac511f4bfff7e9d5caa33df732b57567c5a674fec8ba65a445f79b6a53a2be9
-
SHA512
27a0d5970326484777b52a214179f8e120e65f3298e8bf6787786b22c1ae751cdd80d14cadbdf755ad20ae263b2e33d3876a63c84afad5a3b12082e0dad1752e
-
SSDEEP
49152:ACd1tpSPxNdiQLA26xUoDnC8V2HhULCRYP9kopyAI:AmfpIxHE26xhDnKHkTpjI
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2040 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2040 vlc.exe -
Suspicious use of AdjustPrivilegeToken 6 IoCs
description pid Process Token: 33 436 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 436 AUDIODG.EXE Token: 33 436 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 436 AUDIODG.EXE Token: 33 2040 vlc.exe Token: SeIncBasePriorityPrivilege 2040 vlc.exe -
Suspicious use of FindShellTrayWindow 46 IoCs
pid Process 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe 2040 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2040 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Chica Videos\chicarap2.wmv"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2040
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x5641⤵
- Suspicious use of AdjustPrivilegeToken
PID:436