Analysis

  • max time kernel
    1606s
  • max time network
    1610s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2023, 01:07

General

  • Target

    8mb.video-3iG-Sdzu5zRe.mp4

  • Size

    6.6MB

  • MD5

    14697f8363384f190e24bd14c1defa80

  • SHA1

    4cb79cc946472723ceb76217ddf95dc8a3ac3a02

  • SHA256

    45e323fb2b2f4b316ff9308ea94395146caedbf6b6cae64e1c72c0b9344b30bd

  • SHA512

    49d8ac13178b46cb541937e43065133a07c0108c7029ad13693dc7a2ef45cf573c16e82e6ec4152bc044ead8dca7ba7eb12ed583d9afcabbf6ac11695e4ea5f7

  • SSDEEP

    196608:f8JDxABRILZLyDpZLVHBnIzpMs1f0T/xOneByDM+Hh7zdATmv0:EJqBaQbLpxIl9fUOe6M+HhWTmc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 32 IoCs
  • Suspicious use of SendNotifyMessage 10 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\8mb.video-3iG-Sdzu5zRe.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1256
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0xc4
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1256-59-0x000000013FBF0000-0x000000013FCE8000-memory.dmp

    Filesize

    992KB

  • memory/1256-60-0x000007FEFB7D0000-0x000007FEFB804000-memory.dmp

    Filesize

    208KB

  • memory/1256-61-0x000007FEF6EE0000-0x000007FEF7194000-memory.dmp

    Filesize

    2.7MB

  • memory/1256-62-0x000007FEFBC90000-0x000007FEFBCA8000-memory.dmp

    Filesize

    96KB

  • memory/1256-63-0x000007FEFB740000-0x000007FEFB757000-memory.dmp

    Filesize

    92KB

  • memory/1256-64-0x000007FEFB720000-0x000007FEFB731000-memory.dmp

    Filesize

    68KB

  • memory/1256-65-0x000007FEFB700000-0x000007FEFB717000-memory.dmp

    Filesize

    92KB

  • memory/1256-66-0x000007FEFB490000-0x000007FEFB4A1000-memory.dmp

    Filesize

    68KB

  • memory/1256-67-0x000007FEFB1C0000-0x000007FEFB1DD000-memory.dmp

    Filesize

    116KB

  • memory/1256-68-0x000007FEFB1A0000-0x000007FEFB1B1000-memory.dmp

    Filesize

    68KB

  • memory/1256-69-0x000007FEF5450000-0x000007FEF64FB000-memory.dmp

    Filesize

    16.7MB

  • memory/1256-70-0x000007FEF6CE0000-0x000007FEF6EE0000-memory.dmp

    Filesize

    2.0MB

  • memory/1256-71-0x000007FEFB160000-0x000007FEFB19F000-memory.dmp

    Filesize

    252KB

  • memory/1256-72-0x000007FEFB130000-0x000007FEFB151000-memory.dmp

    Filesize

    132KB

  • memory/1256-73-0x000007FEF7460000-0x000007FEF7478000-memory.dmp

    Filesize

    96KB

  • memory/1256-74-0x000007FEF7440000-0x000007FEF7451000-memory.dmp

    Filesize

    68KB

  • memory/1256-75-0x000007FEF7420000-0x000007FEF7431000-memory.dmp

    Filesize

    68KB

  • memory/1256-76-0x000007FEF7400000-0x000007FEF7411000-memory.dmp

    Filesize

    68KB

  • memory/1256-77-0x000007FEF73E0000-0x000007FEF73FB000-memory.dmp

    Filesize

    108KB

  • memory/1256-78-0x000007FEF73C0000-0x000007FEF73D1000-memory.dmp

    Filesize

    68KB

  • memory/1256-79-0x000007FEF73A0000-0x000007FEF73B8000-memory.dmp

    Filesize

    96KB

  • memory/1256-80-0x000007FEF7370000-0x000007FEF73A0000-memory.dmp

    Filesize

    192KB

  • memory/1256-81-0x000007FEF7300000-0x000007FEF7367000-memory.dmp

    Filesize

    412KB

  • memory/1256-82-0x000007FEF6C70000-0x000007FEF6CDF000-memory.dmp

    Filesize

    444KB

  • memory/1256-83-0x000007FEF72E0000-0x000007FEF72F1000-memory.dmp

    Filesize

    68KB

  • memory/1256-84-0x000007FEF6C10000-0x000007FEF6C66000-memory.dmp

    Filesize

    344KB

  • memory/1256-85-0x000007FEF6A90000-0x000007FEF6C08000-memory.dmp

    Filesize

    1.5MB

  • memory/1256-86-0x000007FEF72C0000-0x000007FEF72D7000-memory.dmp

    Filesize

    92KB

  • memory/1256-87-0x000007FEF6920000-0x000007FEF6A90000-memory.dmp

    Filesize

    1.4MB

  • memory/1256-88-0x000007FEF6900000-0x000007FEF6912000-memory.dmp

    Filesize

    72KB

  • memory/1256-90-0x000007FEF6860000-0x000007FEF68AC000-memory.dmp

    Filesize

    304KB

  • memory/1256-89-0x000007FEF68B0000-0x000007FEF68F2000-memory.dmp

    Filesize

    264KB

  • memory/1256-91-0x000007FEF66F0000-0x000007FEF685B000-memory.dmp

    Filesize

    1.4MB

  • memory/1256-92-0x000007FEF6690000-0x000007FEF66E7000-memory.dmp

    Filesize

    348KB

  • memory/1256-93-0x000007FEF5200000-0x000007FEF544B000-memory.dmp

    Filesize

    2.3MB

  • memory/1256-94-0x000007FEF3A50000-0x000007FEF5200000-memory.dmp

    Filesize

    23.7MB

  • memory/1256-95-0x000007FEFB6F0000-0x000007FEFB700000-memory.dmp

    Filesize

    64KB

  • memory/1256-96-0x000007FEF6660000-0x000007FEF668F000-memory.dmp

    Filesize

    188KB

  • memory/1256-97-0x000007FEF6640000-0x000007FEF6651000-memory.dmp

    Filesize

    68KB

  • memory/1256-98-0x000007FEF6620000-0x000007FEF6636000-memory.dmp

    Filesize

    88KB

  • memory/1256-99-0x000007FEF6550000-0x000007FEF6615000-memory.dmp

    Filesize

    788KB

  • memory/1256-100-0x000007FEF39D0000-0x000007FEF3A45000-memory.dmp

    Filesize

    468KB

  • memory/1256-101-0x000007FEF3960000-0x000007FEF39C2000-memory.dmp

    Filesize

    392KB

  • memory/1256-102-0x000007FEF38F0000-0x000007FEF395D000-memory.dmp

    Filesize

    436KB

  • memory/1256-104-0x000007FEF6510000-0x000007FEF6524000-memory.dmp

    Filesize

    80KB

  • memory/1256-103-0x000007FEF6530000-0x000007FEF6543000-memory.dmp

    Filesize

    76KB

  • memory/1256-105-0x000007FEF38A0000-0x000007FEF38F0000-memory.dmp

    Filesize

    320KB

  • memory/1256-106-0x000007FEF3880000-0x000007FEF3895000-memory.dmp

    Filesize

    84KB

  • memory/1256-107-0x000007FEF3660000-0x000007FEF387D000-memory.dmp

    Filesize

    2.1MB

  • memory/1256-108-0x000007FEF3520000-0x000007FEF3535000-memory.dmp

    Filesize

    84KB

  • memory/1256-109-0x000007FEF3500000-0x000007FEF3511000-memory.dmp

    Filesize

    68KB

  • memory/1256-110-0x000007FEF34E0000-0x000007FEF34F2000-memory.dmp

    Filesize

    72KB

  • memory/1256-111-0x000007FEF3290000-0x000007FEF32B3000-memory.dmp

    Filesize

    140KB

  • memory/1256-112-0x000007FEF34C0000-0x000007FEF34D3000-memory.dmp

    Filesize

    76KB

  • memory/1256-113-0x000007FEF3110000-0x000007FEF328A000-memory.dmp

    Filesize

    1.5MB

  • memory/1256-114-0x000007FEF3010000-0x000007FEF3104000-memory.dmp

    Filesize

    976KB

  • memory/1256-115-0x000007FEF2FE0000-0x000007FEF300A000-memory.dmp

    Filesize

    168KB

  • memory/1256-116-0x000007FEF2FC0000-0x000007FEF2FD3000-memory.dmp

    Filesize

    76KB

  • memory/1256-117-0x000007FEF2FA0000-0x000007FEF2FBB000-memory.dmp

    Filesize

    108KB

  • memory/1256-118-0x000007FEF2F80000-0x000007FEF2F92000-memory.dmp

    Filesize

    72KB

  • memory/1256-119-0x000007FEF2F60000-0x000007FEF2F75000-memory.dmp

    Filesize

    84KB

  • memory/1256-120-0x000007FEF2F40000-0x000007FEF2F53000-memory.dmp

    Filesize

    76KB

  • memory/1256-121-0x000007FEF2F20000-0x000007FEF2F34000-memory.dmp

    Filesize

    80KB

  • memory/1256-122-0x000007FEF2F00000-0x000007FEF2F12000-memory.dmp

    Filesize

    72KB