Analysis

  • max time kernel
    163s
  • max time network
    179s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    01-04-2023 06:49

General

  • Target

    Synpase/workspace/midi/Undertale_-_Megalovania.mid

  • Size

    25KB

  • MD5

    08a745dacc80fd74272e4b53f9c1b4d8

  • SHA1

    38bc957dcdc56f82519cb420a9eccde26fb987cc

  • SHA256

    df44d4daf35ea423eec1375f6dabb59c00a1e79fb47d7973f083361d41d6b57c

  • SHA512

    c9e24effede5744b054d91d35dd5c991b6e86d903c166b8b3d30564a4c1c73819cc872bd5a01aee4f798b5c15d16f6deef070b15d76ae89ccfd9adfa4b052f61

  • SSDEEP

    192:Z5GWo/WmWj4gPWA+WAu6OWPTWO6pWQrWmWBVWmWvWsYWs1lUUUUUUUCsHsmneXWa:94gY1AQYSl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 7 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Synpase\workspace\midi\Undertale_-_Megalovania.mid"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1556-121-0x00007FF605E80000-0x00007FF605F78000-memory.dmp

    Filesize

    992KB

  • memory/1556-122-0x00007FFEFA370000-0x00007FFEFA3A4000-memory.dmp

    Filesize

    208KB

  • memory/1556-123-0x00007FFEF6CA0000-0x00007FFEF6F54000-memory.dmp

    Filesize

    2.7MB

  • memory/1556-124-0x00007FF605E80000-0x00007FF605F78000-memory.dmp

    Filesize

    992KB

  • memory/1556-125-0x00007FFEFA370000-0x00007FFEFA3A4000-memory.dmp

    Filesize

    208KB

  • memory/1556-126-0x00007FFEF6CA0000-0x00007FFEF6F54000-memory.dmp

    Filesize

    2.7MB

  • memory/1556-129-0x00007FFEF6CA0000-0x00007FFEF6F54000-memory.dmp

    Filesize

    2.7MB

  • memory/1556-130-0x00007FFEFA350000-0x00007FFEFA368000-memory.dmp

    Filesize

    96KB

  • memory/1556-131-0x00007FFEF6C20000-0x00007FFEF6C37000-memory.dmp

    Filesize

    92KB

  • memory/1556-133-0x00007FFEF6BE0000-0x00007FFEF6BF7000-memory.dmp

    Filesize

    92KB

  • memory/1556-135-0x00007FFEF6830000-0x00007FFEF684D000-memory.dmp

    Filesize

    116KB

  • memory/1556-136-0x00007FFEF6810000-0x00007FFEF6821000-memory.dmp

    Filesize

    68KB

  • memory/1556-134-0x00007FFEF6850000-0x00007FFEF6861000-memory.dmp

    Filesize

    68KB

  • memory/1556-132-0x00007FFEF6C00000-0x00007FFEF6C11000-memory.dmp

    Filesize

    68KB

  • memory/1556-137-0x00007FFEE7A30000-0x00007FFEE7C30000-memory.dmp

    Filesize

    2.0MB

  • memory/1556-138-0x00007FFEE6980000-0x00007FFEE7A2B000-memory.dmp

    Filesize

    16.7MB

  • memory/1556-139-0x00007FFEF6540000-0x00007FFEF657F000-memory.dmp

    Filesize

    252KB

  • memory/1556-147-0x00007FFEF6CA0000-0x00007FFEF6F54000-memory.dmp

    Filesize

    2.7MB

  • memory/1556-156-0x00007FFEE6980000-0x00007FFEE7A2B000-memory.dmp

    Filesize

    16.7MB

  • memory/1556-158-0x00007FFEF6280000-0x00007FFEF62A1000-memory.dmp

    Filesize

    132KB

  • memory/1556-159-0x00007FFEF6100000-0x00007FFEF6118000-memory.dmp

    Filesize

    96KB

  • memory/1556-160-0x00007FFEF6080000-0x00007FFEF6091000-memory.dmp

    Filesize

    68KB

  • memory/1556-162-0x00007FFEF6040000-0x00007FFEF6051000-memory.dmp

    Filesize

    68KB

  • memory/1556-161-0x00007FFEF6060000-0x00007FFEF6071000-memory.dmp

    Filesize

    68KB

  • memory/1556-163-0x00007FFEF6020000-0x00007FFEF603B000-memory.dmp

    Filesize

    108KB

  • memory/1556-164-0x00007FFEF6000000-0x00007FFEF6011000-memory.dmp

    Filesize

    68KB

  • memory/1556-165-0x00007FFEF5580000-0x00007FFEF5598000-memory.dmp

    Filesize

    96KB

  • memory/1556-166-0x00007FFEF4D20000-0x00007FFEF4D50000-memory.dmp

    Filesize

    192KB

  • memory/1556-167-0x00007FFEE6910000-0x00007FFEE6977000-memory.dmp

    Filesize

    412KB

  • memory/1556-168-0x00007FFEE68A0000-0x00007FFEE690F000-memory.dmp

    Filesize

    444KB

  • memory/1556-169-0x00007FFEF4D00000-0x00007FFEF4D11000-memory.dmp

    Filesize

    68KB

  • memory/1556-170-0x00007FFEE6840000-0x00007FFEE6896000-memory.dmp

    Filesize

    344KB

  • memory/1556-171-0x00007FFEF4CD0000-0x00007FFEF4CF8000-memory.dmp

    Filesize

    160KB

  • memory/1556-172-0x00007FFEE6810000-0x00007FFEE6834000-memory.dmp

    Filesize

    144KB

  • memory/1556-173-0x00007FFEE67F0000-0x00007FFEE6807000-memory.dmp

    Filesize

    92KB

  • memory/1556-174-0x00007FFEE67C0000-0x00007FFEE67E3000-memory.dmp

    Filesize

    140KB

  • memory/1556-175-0x00007FFEE67A0000-0x00007FFEE67B1000-memory.dmp

    Filesize

    68KB

  • memory/1556-177-0x00007FFEE6750000-0x00007FFEE6771000-memory.dmp

    Filesize

    132KB

  • memory/1556-179-0x00007FFEE6710000-0x00007FFEE6722000-memory.dmp

    Filesize

    72KB

  • memory/1556-178-0x00007FFEE6730000-0x00007FFEE6743000-memory.dmp

    Filesize

    76KB

  • memory/1556-176-0x00007FFEE6780000-0x00007FFEE6792000-memory.dmp

    Filesize

    72KB

  • memory/1556-180-0x00007FFEE65D0000-0x00007FFEE670B000-memory.dmp

    Filesize

    1.2MB

  • memory/1556-181-0x00007FFEE65A0000-0x00007FFEE65CC000-memory.dmp

    Filesize

    176KB

  • memory/1556-182-0x00007FFEE63E0000-0x00007FFEE6592000-memory.dmp

    Filesize

    1.7MB

  • memory/1556-183-0x00007FFEE6380000-0x00007FFEE63DC000-memory.dmp

    Filesize

    368KB

  • memory/1556-185-0x00007FFEE62C0000-0x00007FFEE6357000-memory.dmp

    Filesize

    604KB

  • memory/1556-186-0x00007FFEE62A0000-0x00007FFEE62B2000-memory.dmp

    Filesize

    72KB

  • memory/1556-184-0x00007FFEE6360000-0x00007FFEE6371000-memory.dmp

    Filesize

    68KB

  • memory/1556-187-0x00007FFEE6060000-0x00007FFEE6291000-memory.dmp

    Filesize

    2.2MB

  • memory/1556-188-0x00007FFEE6020000-0x00007FFEE6055000-memory.dmp

    Filesize

    212KB

  • memory/1556-189-0x00007FFEE5FF0000-0x00007FFEE6015000-memory.dmp

    Filesize

    148KB