Resubmissions

24/04/2023, 23:31

230424-3h6mnsfc42 1

24/04/2023, 23:28

230424-3f1zeagh7y 1

Analysis

  • max time kernel
    80s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    24/04/2023, 23:28

General

  • Target

    8067ba8a0569364709313ed9244182e3.mp4

  • Size

    3.1MB

  • MD5

    7941dc5069f9d8a68ae19bb02ac2d735

  • SHA1

    0cf34a92beb7e05ff6da0811628b1b6fbe24eb9f

  • SHA256

    17ead8ff12f579f57e100a2ea143fdb27891aa477139a22f34271940e28b4eaf

  • SHA512

    43df269a01e03fe9bffa381946e1787c16e413d8eb37fa414b5ef18669683db2a04b1b9eb6326ef65f5d6c1b1f5eb9ad6f5b8dea3c90d74109f48bacb55ba3f3

  • SSDEEP

    49152:TIMPrPUnDdBLvjDEESRZPBg6ZNHZERYkApmAvlJtYpXozVXpLhfAAfGBNl:TIMsnnvjDEdRAqlZa4LZxXpFAAfGPl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 28 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\8067ba8a0569364709313ed9244182e3.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1116
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x51c
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1664

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1116-59-0x000000013FB00000-0x000000013FBF8000-memory.dmp

    Filesize

    992KB

  • memory/1116-60-0x000007FEF7350000-0x000007FEF7384000-memory.dmp

    Filesize

    208KB

  • memory/1116-64-0x000007FEF7310000-0x000007FEF7321000-memory.dmp

    Filesize

    68KB

  • memory/1116-68-0x000007FEF6590000-0x000007FEF6790000-memory.dmp

    Filesize

    2.0MB

  • memory/1116-69-0x000007FEF6D10000-0x000007FEF6D21000-memory.dmp

    Filesize

    68KB

  • memory/1116-70-0x000007FEF68E0000-0x000007FEF691F000-memory.dmp

    Filesize

    252KB

  • memory/1116-71-0x000007FEF68B0000-0x000007FEF68D1000-memory.dmp

    Filesize

    132KB

  • memory/1116-72-0x000007FEF6890000-0x000007FEF68A8000-memory.dmp

    Filesize

    96KB

  • memory/1116-73-0x000007FEF6870000-0x000007FEF6881000-memory.dmp

    Filesize

    68KB

  • memory/1116-66-0x000007FEF6D50000-0x000007FEF6D61000-memory.dmp

    Filesize

    68KB

  • memory/1116-75-0x000007FEF67F0000-0x000007FEF6801000-memory.dmp

    Filesize

    68KB

  • memory/1116-74-0x000007FEF6810000-0x000007FEF6821000-memory.dmp

    Filesize

    68KB

  • memory/1116-67-0x000007FEF6D30000-0x000007FEF6D4D000-memory.dmp

    Filesize

    116KB

  • memory/1116-65-0x000007FEF6D70000-0x000007FEF6D87000-memory.dmp

    Filesize

    92KB

  • memory/1116-63-0x000007FEF7330000-0x000007FEF7347000-memory.dmp

    Filesize

    92KB

  • memory/1116-62-0x000007FEFB770000-0x000007FEFB788000-memory.dmp

    Filesize

    96KB

  • memory/1116-61-0x000007FEF6920000-0x000007FEF6BD4000-memory.dmp

    Filesize

    2.7MB

  • memory/1116-83-0x000007FEF5390000-0x000007FEF53A1000-memory.dmp

    Filesize

    68KB

  • memory/1116-86-0x000007FEF5190000-0x000007FEF51A7000-memory.dmp

    Filesize

    92KB

  • memory/1116-90-0x000007FEF4F60000-0x000007FEF4FAC000-memory.dmp

    Filesize

    304KB

  • memory/1116-89-0x000007FEF4FB0000-0x000007FEF4FF2000-memory.dmp

    Filesize

    264KB

  • memory/1116-92-0x000007FEF4D90000-0x000007FEF4DE7000-memory.dmp

    Filesize

    348KB

  • memory/1116-91-0x000007FEF4DF0000-0x000007FEF4F5B000-memory.dmp

    Filesize

    1.4MB

  • memory/1116-88-0x000007FEF5000000-0x000007FEF5012000-memory.dmp

    Filesize

    72KB

  • memory/1116-87-0x000007FEF5020000-0x000007FEF5190000-memory.dmp

    Filesize

    1.4MB

  • memory/1116-85-0x000007FEF51B0000-0x000007FEF5328000-memory.dmp

    Filesize

    1.5MB

  • memory/1116-93-0x000007FEF4B40000-0x000007FEF4D8B000-memory.dmp

    Filesize

    2.3MB

  • memory/1116-84-0x000007FEF5330000-0x000007FEF5386000-memory.dmp

    Filesize

    344KB

  • memory/1116-76-0x000007FEF54E0000-0x000007FEF658B000-memory.dmp

    Filesize

    16.7MB

  • memory/1116-82-0x000007FEF53B0000-0x000007FEF541F000-memory.dmp

    Filesize

    444KB

  • memory/1116-81-0x000007FEF5420000-0x000007FEF5487000-memory.dmp

    Filesize

    412KB

  • memory/1116-80-0x000007FEF5490000-0x000007FEF54C0000-memory.dmp

    Filesize

    192KB

  • memory/1116-79-0x000007FEF54C0000-0x000007FEF54D8000-memory.dmp

    Filesize

    96KB

  • memory/1116-78-0x000007FEF67B0000-0x000007FEF67C1000-memory.dmp

    Filesize

    68KB

  • memory/1116-77-0x000007FEF67D0000-0x000007FEF67EB000-memory.dmp

    Filesize

    108KB

  • memory/1116-95-0x000007FEF7890000-0x000007FEF78A0000-memory.dmp

    Filesize

    64KB

  • memory/1116-98-0x000007FEF3320000-0x000007FEF3336000-memory.dmp

    Filesize

    88KB

  • memory/1116-97-0x000007FEF3340000-0x000007FEF3351000-memory.dmp

    Filesize

    68KB

  • memory/1116-96-0x000007FEF3360000-0x000007FEF338F000-memory.dmp

    Filesize

    188KB

  • memory/1116-100-0x000007FEF31D0000-0x000007FEF3245000-memory.dmp

    Filesize

    468KB

  • memory/1116-99-0x000007FEF3250000-0x000007FEF3315000-memory.dmp

    Filesize

    788KB

  • memory/1116-101-0x000007FEF3160000-0x000007FEF31C2000-memory.dmp

    Filesize

    392KB

  • memory/1116-94-0x000007FEF3390000-0x000007FEF4B40000-memory.dmp

    Filesize

    23.7MB

  • memory/1116-107-0x000007FEF2E20000-0x000007FEF303D000-memory.dmp

    Filesize

    2.1MB

  • memory/1116-108-0x000007FEF2E00000-0x000007FEF2E15000-memory.dmp

    Filesize

    84KB

  • memory/1116-109-0x000007FEF2DD0000-0x000007FEF2DF3000-memory.dmp

    Filesize

    140KB

  • memory/1116-110-0x000007FEF2DB0000-0x000007FEF2DC3000-memory.dmp

    Filesize

    76KB

  • memory/1116-106-0x000007FEF3040000-0x000007FEF3055000-memory.dmp

    Filesize

    84KB

  • memory/1116-111-0x000007FEF2CB0000-0x000007FEF2DA4000-memory.dmp

    Filesize

    976KB

  • memory/1116-112-0x000007FEF2C80000-0x000007FEF2CAA000-memory.dmp

    Filesize

    168KB

  • memory/1116-113-0x000007FEF2C60000-0x000007FEF2C73000-memory.dmp

    Filesize

    76KB

  • memory/1116-114-0x000007FEF2C40000-0x000007FEF2C5B000-memory.dmp

    Filesize

    108KB

  • memory/1116-115-0x000007FEF2C20000-0x000007FEF2C32000-memory.dmp

    Filesize

    72KB

  • memory/1116-116-0x000007FEF2C00000-0x000007FEF2C15000-memory.dmp

    Filesize

    84KB

  • memory/1116-117-0x000007FEF2BE0000-0x000007FEF2BF3000-memory.dmp

    Filesize

    76KB

  • memory/1116-118-0x000007FEF2BC0000-0x000007FEF2BD4000-memory.dmp

    Filesize

    80KB

  • memory/1116-119-0x000007FEF2BA0000-0x000007FEF2BB2000-memory.dmp

    Filesize

    72KB

  • memory/1116-120-0x000007FEF2B80000-0x000007FEF2B95000-memory.dmp

    Filesize

    84KB

  • memory/1116-122-0x000007FEF2B40000-0x000007FEF2B51000-memory.dmp

    Filesize

    68KB

  • memory/1116-121-0x000007FEF2B60000-0x000007FEF2B75000-memory.dmp

    Filesize

    84KB

  • memory/1116-105-0x000007FEF3060000-0x000007FEF30B0000-memory.dmp

    Filesize

    320KB

  • memory/1116-104-0x000007FEF30B0000-0x000007FEF30C4000-memory.dmp

    Filesize

    80KB

  • memory/1116-103-0x000007FEF30D0000-0x000007FEF30E3000-memory.dmp

    Filesize

    76KB

  • memory/1116-102-0x000007FEF30F0000-0x000007FEF315D000-memory.dmp

    Filesize

    436KB