Analysis

  • max time kernel
    141s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    24/03/2023, 22:38

General

  • Target

    Chica Videos/chicarap2.wmv

  • Size

    1.8MB

  • MD5

    c8b63ee4ada46bc4bbe5ac6d1c8bca3c

  • SHA1

    90617f7c2de3cddb0272b67acf965f50d2564e8b

  • SHA256

    3ac511f4bfff7e9d5caa33df732b57567c5a674fec8ba65a445f79b6a53a2be9

  • SHA512

    27a0d5970326484777b52a214179f8e120e65f3298e8bf6787786b22c1ae751cdd80d14cadbdf755ad20ae263b2e33d3876a63c84afad5a3b12082e0dad1752e

  • SSDEEP

    49152:ACd1tpSPxNdiQLA26xUoDnC8V2HhULCRYP9kopyAI:AmfpIxHE26xhDnKHkTpjI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 46 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Chica Videos\chicarap2.wmv"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2040
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x564
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:436

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2040-59-0x000000013F590000-0x000000013F688000-memory.dmp

          Filesize

          992KB

        • memory/2040-60-0x000007FEFB0A0000-0x000007FEFB0D4000-memory.dmp

          Filesize

          208KB

        • memory/2040-61-0x000007FEF6830000-0x000007FEF6AE4000-memory.dmp

          Filesize

          2.7MB

        • memory/2040-62-0x000007FEFB700000-0x000007FEFB718000-memory.dmp

          Filesize

          96KB

        • memory/2040-63-0x000007FEFB030000-0x000007FEFB047000-memory.dmp

          Filesize

          92KB

        • memory/2040-64-0x000007FEFB010000-0x000007FEFB021000-memory.dmp

          Filesize

          68KB

        • memory/2040-65-0x000007FEFAFF0000-0x000007FEFB007000-memory.dmp

          Filesize

          92KB

        • memory/2040-66-0x000007FEFAFD0000-0x000007FEFAFE1000-memory.dmp

          Filesize

          68KB

        • memory/2040-67-0x000007FEFAFB0000-0x000007FEFAFCD000-memory.dmp

          Filesize

          116KB

        • memory/2040-68-0x000007FEF6520000-0x000007FEF6720000-memory.dmp

          Filesize

          2.0MB

        • memory/2040-69-0x000007FEFAE70000-0x000007FEFAE81000-memory.dmp

          Filesize

          68KB

        • memory/2040-70-0x000007FEFAE30000-0x000007FEFAE6F000-memory.dmp

          Filesize

          252KB

        • memory/2040-71-0x000007FEFAE00000-0x000007FEFAE21000-memory.dmp

          Filesize

          132KB

        • memory/2040-72-0x000007FEF5470000-0x000007FEF651B000-memory.dmp

          Filesize

          16.7MB

        • memory/2040-73-0x000007FEFADE0000-0x000007FEFADF8000-memory.dmp

          Filesize

          96KB

        • memory/2040-74-0x000007FEFADC0000-0x000007FEFADD1000-memory.dmp

          Filesize

          68KB

        • memory/2040-75-0x000007FEFADA0000-0x000007FEFADB1000-memory.dmp

          Filesize

          68KB

        • memory/2040-76-0x000007FEFAD80000-0x000007FEFAD91000-memory.dmp

          Filesize

          68KB

        • memory/2040-77-0x000007FEFABE0000-0x000007FEFABFB000-memory.dmp

          Filesize

          108KB

        • memory/2040-78-0x000007FEFABC0000-0x000007FEFABD1000-memory.dmp

          Filesize

          68KB

        • memory/2040-79-0x000007FEFABA0000-0x000007FEFABB8000-memory.dmp

          Filesize

          96KB

        • memory/2040-80-0x000007FEFAB70000-0x000007FEFABA0000-memory.dmp

          Filesize

          192KB

        • memory/2040-81-0x000007FEF6C30000-0x000007FEF6C97000-memory.dmp

          Filesize

          412KB

        • memory/2040-82-0x000007FEF5400000-0x000007FEF546F000-memory.dmp

          Filesize

          444KB

        • memory/2040-83-0x000007FEFAB50000-0x000007FEFAB61000-memory.dmp

          Filesize

          68KB

        • memory/2040-84-0x000007FEF53A0000-0x000007FEF53F6000-memory.dmp

          Filesize

          344KB

        • memory/2040-86-0x000007FEF6740000-0x000007FEF6764000-memory.dmp

          Filesize

          144KB

        • memory/2040-85-0x000007FEF6800000-0x000007FEF6828000-memory.dmp

          Filesize

          160KB

        • memory/2040-87-0x000007FEF5220000-0x000007FEF5398000-memory.dmp

          Filesize

          1.5MB

        • memory/2040-88-0x000007FEF77A0000-0x000007FEF77B7000-memory.dmp

          Filesize

          92KB

        • memory/2040-89-0x000007FEFAFA0000-0x000007FEFAFB0000-memory.dmp

          Filesize

          64KB

        • memory/2040-90-0x000007FEF51F0000-0x000007FEF521F000-memory.dmp

          Filesize

          188KB

        • memory/2040-92-0x000007FEF51D0000-0x000007FEF51E6000-memory.dmp

          Filesize

          88KB

        • memory/2040-91-0x000007FEF6C10000-0x000007FEF6C21000-memory.dmp

          Filesize

          68KB

        • memory/2040-93-0x000007FEF5100000-0x000007FEF51C5000-memory.dmp

          Filesize

          788KB

        • memory/2040-94-0x000007FEF5080000-0x000007FEF50F5000-memory.dmp

          Filesize

          468KB

        • memory/2040-95-0x000007FEF5010000-0x000007FEF5072000-memory.dmp

          Filesize

          392KB

        • memory/2040-96-0x000007FEF4FA0000-0x000007FEF500D000-memory.dmp

          Filesize

          436KB

        • memory/2040-97-0x000007FEF4F80000-0x000007FEF4F93000-memory.dmp

          Filesize

          76KB

        • memory/2040-98-0x000007FEF4F60000-0x000007FEF4F74000-memory.dmp

          Filesize

          80KB

        • memory/2040-99-0x000007FEF4F10000-0x000007FEF4F60000-memory.dmp

          Filesize

          320KB

        • memory/2040-100-0x000007FEF4E50000-0x000007FEF4F0D000-memory.dmp

          Filesize

          756KB

        • memory/2040-101-0x000007FEF4E20000-0x000007FEF4E50000-memory.dmp

          Filesize

          192KB

        • memory/2040-102-0x000007FEF3670000-0x000007FEF4E20000-memory.dmp

          Filesize

          23.7MB

        • memory/2040-103-0x000007FEF3500000-0x000007FEF3670000-memory.dmp

          Filesize

          1.4MB

        • memory/2040-104-0x000007FEF34E0000-0x000007FEF34F2000-memory.dmp

          Filesize

          72KB

        • memory/2040-105-0x000007FEF3490000-0x000007FEF34D2000-memory.dmp

          Filesize

          264KB

        • memory/2040-106-0x000007FEF3440000-0x000007FEF348C000-memory.dmp

          Filesize

          304KB

        • memory/2040-107-0x000007FEF32D0000-0x000007FEF343B000-memory.dmp

          Filesize

          1.4MB

        • memory/2040-108-0x000007FEF3270000-0x000007FEF32C7000-memory.dmp

          Filesize

          348KB

        • memory/2040-109-0x000007FEF3020000-0x000007FEF326B000-memory.dmp

          Filesize

          2.3MB

        • memory/2040-110-0x000007FEF2E00000-0x000007FEF301D000-memory.dmp

          Filesize

          2.1MB

        • memory/2040-111-0x000007FEF2DE0000-0x000007FEF2DF5000-memory.dmp

          Filesize

          84KB

        • memory/2040-112-0x000007FEF2DB0000-0x000007FEF2DD3000-memory.dmp

          Filesize

          140KB

        • memory/2040-113-0x000007FEF2D90000-0x000007FEF2DA3000-memory.dmp

          Filesize

          76KB

        • memory/2040-114-0x000007FEF2C90000-0x000007FEF2D84000-memory.dmp

          Filesize

          976KB

        • memory/2040-115-0x000007FEF2C60000-0x000007FEF2C8A000-memory.dmp

          Filesize

          168KB

        • memory/2040-117-0x000007FEF2C20000-0x000007FEF2C3B000-memory.dmp

          Filesize

          108KB

        • memory/2040-118-0x000007FEF2C00000-0x000007FEF2C12000-memory.dmp

          Filesize

          72KB

        • memory/2040-116-0x000007FEF2C40000-0x000007FEF2C53000-memory.dmp

          Filesize

          76KB

        • memory/2040-119-0x000007FEF2BE0000-0x000007FEF2BF5000-memory.dmp

          Filesize

          84KB

        • memory/2040-120-0x000007FEF2BC0000-0x000007FEF2BD3000-memory.dmp

          Filesize

          76KB

        • memory/2040-122-0x000007FEF2B80000-0x000007FEF2B92000-memory.dmp

          Filesize

          72KB

        • memory/2040-121-0x000007FEF2BA0000-0x000007FEF2BB4000-memory.dmp

          Filesize

          80KB