Analysis

  • max time kernel
    148s
  • max time network
    180s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    01-04-2023 06:49

General

  • Target

    Synpase/workspace/midi/We_Are_Number_One.mid

  • Size

    46KB

  • MD5

    e382d57e37ca7d2bb6aa4479536dc1ff

  • SHA1

    e7cc4a8a0a259a362bf252530c2ddca2c4cfdaf0

  • SHA256

    e6dd5b15c8ab40e5786a4e08bc2e9f3c1a6afb981925fd045e084555770450e9

  • SHA512

    df74d9f7a97c7faa4e0f0263c446a046d9c21ee6d8f2ec2334bf538b7a6d75cf8a42fb7e4d5d57b5f830c8c5d56a7c3c15f708daad139309f02f21c8c909b7cc

  • SSDEEP

    768:kpp7pp5ppSpprppgpp7ppKppbppbppbppppppPvnvnvnvnvnvnvUevnvnvnvnvnk:KP+YmZUOkKnUOO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Synpase\workspace\midi\We_Are_Number_One.mid"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2496-126-0x00007FF689610000-0x00007FF689708000-memory.dmp

    Filesize

    992KB

  • memory/2496-127-0x00007FFD3B810000-0x00007FFD3B844000-memory.dmp

    Filesize

    208KB

  • memory/2496-128-0x00007FFD37370000-0x00007FFD37624000-memory.dmp

    Filesize

    2.7MB

  • memory/2496-129-0x00007FFD3C4E0000-0x00007FFD3C4F8000-memory.dmp

    Filesize

    96KB

  • memory/2496-130-0x00007FFD3C0D0000-0x00007FFD3C0E7000-memory.dmp

    Filesize

    92KB

  • memory/2496-131-0x00007FFD3B3F0000-0x00007FFD3B401000-memory.dmp

    Filesize

    68KB

  • memory/2496-132-0x00007FFD3B3D0000-0x00007FFD3B3E7000-memory.dmp

    Filesize

    92KB

  • memory/2496-134-0x00007FFD3B390000-0x00007FFD3B3AD000-memory.dmp

    Filesize

    116KB

  • memory/2496-133-0x00007FFD3B3B0000-0x00007FFD3B3C1000-memory.dmp

    Filesize

    68KB

  • memory/2496-135-0x00007FFD3B370000-0x00007FFD3B381000-memory.dmp

    Filesize

    68KB

  • memory/2496-136-0x00007FFD36BC0000-0x00007FFD36DC0000-memory.dmp

    Filesize

    2.0MB

  • memory/2496-137-0x00007FFD37B60000-0x00007FFD37B9F000-memory.dmp

    Filesize

    252KB

  • memory/2496-138-0x00007FFD27D50000-0x00007FFD28DFB000-memory.dmp

    Filesize

    16.7MB

  • memory/2496-139-0x00007FFD37830000-0x00007FFD37851000-memory.dmp

    Filesize

    132KB

  • memory/2496-140-0x00007FFD38030000-0x00007FFD38048000-memory.dmp

    Filesize

    96KB

  • memory/2496-141-0x00007FFD37B40000-0x00007FFD37B51000-memory.dmp

    Filesize

    68KB

  • memory/2496-142-0x00007FFD37810000-0x00007FFD37821000-memory.dmp

    Filesize

    68KB

  • memory/2496-143-0x00007FFD376D0000-0x00007FFD376E1000-memory.dmp

    Filesize

    68KB

  • memory/2496-144-0x00007FFD376B0000-0x00007FFD376CB000-memory.dmp

    Filesize

    108KB

  • memory/2496-145-0x00007FFD37690000-0x00007FFD376A1000-memory.dmp

    Filesize

    68KB

  • memory/2496-146-0x00007FFD37670000-0x00007FFD37688000-memory.dmp

    Filesize

    96KB

  • memory/2496-148-0x00007FFD372D0000-0x00007FFD37337000-memory.dmp

    Filesize

    412KB

  • memory/2496-147-0x00007FFD37340000-0x00007FFD37370000-memory.dmp

    Filesize

    192KB

  • memory/2496-149-0x00007FFD371F0000-0x00007FFD3725F000-memory.dmp

    Filesize

    444KB

  • memory/2496-152-0x00007FFD372A0000-0x00007FFD372C8000-memory.dmp

    Filesize

    160KB

  • memory/2496-160-0x00007FFD36B10000-0x00007FFD36B22000-memory.dmp

    Filesize

    72KB

  • memory/2496-161-0x00007FFD36690000-0x00007FFD367CB000-memory.dmp

    Filesize

    1.2MB

  • memory/2496-159-0x00007FFD36B30000-0x00007FFD36B43000-memory.dmp

    Filesize

    76KB

  • memory/2496-162-0x00007FFD36AE0000-0x00007FFD36B0C000-memory.dmp

    Filesize

    176KB

  • memory/2496-164-0x00007FFD36A80000-0x00007FFD36ADC000-memory.dmp

    Filesize

    368KB

  • memory/2496-167-0x00007FFD369A0000-0x00007FFD369B2000-memory.dmp

    Filesize

    72KB

  • memory/2496-172-0x00007FFD36620000-0x00007FFD36631000-memory.dmp

    Filesize

    68KB

  • memory/2496-176-0x00007FFD35490000-0x00007FFD354F2000-memory.dmp

    Filesize

    392KB

  • memory/2496-180-0x00007FFD27880000-0x00007FFD278D0000-memory.dmp

    Filesize

    320KB

  • memory/2496-182-0x00007FFD27790000-0x00007FFD277C0000-memory.dmp

    Filesize

    192KB

  • memory/2496-181-0x00007FFD277C0000-0x00007FFD2787D000-memory.dmp

    Filesize

    756KB

  • memory/2496-179-0x00007FFD2CED0000-0x00007FFD2CEE4000-memory.dmp

    Filesize

    80KB

  • memory/2496-178-0x00007FFD35470000-0x00007FFD35483000-memory.dmp

    Filesize

    76KB

  • memory/2496-177-0x00007FFD278D0000-0x00007FFD2793D000-memory.dmp

    Filesize

    436KB

  • memory/2496-175-0x00007FFD361C0000-0x00007FFD36235000-memory.dmp

    Filesize

    468KB

  • memory/2496-174-0x00007FFD27940000-0x00007FFD27A05000-memory.dmp

    Filesize

    788KB

  • memory/2496-173-0x00007FFD36240000-0x00007FFD36256000-memory.dmp

    Filesize

    88KB

  • memory/2496-171-0x00007FFD36640000-0x00007FFD3666F000-memory.dmp

    Filesize

    188KB

  • memory/2496-170-0x00007FFD3B7D0000-0x00007FFD3B7E0000-memory.dmp

    Filesize

    64KB

  • memory/2496-189-0x00007FFD25F20000-0x00007FFD25F47000-memory.dmp

    Filesize

    156KB

  • memory/2496-188-0x00007FFD25F50000-0x00007FFD25F65000-memory.dmp

    Filesize

    84KB

  • memory/2496-187-0x00007FFD29140000-0x00007FFD29153000-memory.dmp

    Filesize

    76KB

  • memory/2496-186-0x00007FFD2CEB0000-0x00007FFD2CEC1000-memory.dmp

    Filesize

    68KB

  • memory/2496-185-0x00007FFD25F70000-0x00007FFD25F92000-memory.dmp

    Filesize

    136KB

  • memory/2496-184-0x00007FFD25FA0000-0x00007FFD25FDA000-memory.dmp

    Filesize

    232KB

  • memory/2496-183-0x00007FFD25FE0000-0x00007FFD27790000-memory.dmp

    Filesize

    23.7MB

  • memory/2496-169-0x00007FFD36670000-0x00007FFD36687000-memory.dmp

    Filesize

    92KB

  • memory/2496-168-0x00007FFD27A10000-0x00007FFD27B88000-memory.dmp

    Filesize

    1.5MB

  • memory/2496-166-0x00007FFD36260000-0x00007FFD362F7000-memory.dmp

    Filesize

    604KB

  • memory/2496-165-0x00007FFD369C0000-0x00007FFD369D1000-memory.dmp

    Filesize

    68KB

  • memory/2496-163-0x00007FFD27B90000-0x00007FFD27D42000-memory.dmp

    Filesize

    1.7MB

  • memory/2496-158-0x00007FFD36B50000-0x00007FFD36B71000-memory.dmp

    Filesize

    132KB

  • memory/2496-157-0x00007FFD36B80000-0x00007FFD36B92000-memory.dmp

    Filesize

    72KB

  • memory/2496-156-0x00007FFD36BA0000-0x00007FFD36BB1000-memory.dmp

    Filesize

    68KB

  • memory/2496-155-0x00007FFD37090000-0x00007FFD370B3000-memory.dmp

    Filesize

    140KB

  • memory/2496-153-0x00007FFD371C0000-0x00007FFD371E4000-memory.dmp

    Filesize

    144KB

  • memory/2496-154-0x00007FFD370C0000-0x00007FFD370D7000-memory.dmp

    Filesize

    92KB

  • memory/2496-151-0x00007FFD370E0000-0x00007FFD37136000-memory.dmp

    Filesize

    344KB

  • memory/2496-150-0x00007FFD37650000-0x00007FFD37661000-memory.dmp

    Filesize

    68KB