Resubmissions
24-05-2023 15:06
230524-sg7hgada72 605-05-2023 19:51
230505-yk45eaag22 105-05-2023 19:47
230505-yhzf5sce61 605-05-2023 19:44
230505-yf7dzaac46 605-05-2023 19:37
230505-yb75psca8t 605-05-2023 19:34
230505-x989zsbg8y 605-05-2023 19:33
230505-x9hr2ahf39 605-05-2023 18:11
230505-wsxn7aea5s 605-05-2023 17:09
230505-vpajtabe99 6Analysis
-
max time kernel
143s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
05-05-2023 19:34
Static task
static1
Behavioral task
behavioral1
Sample
df4brk2-5f3486a6-6e7e-42e1-a5b1-1b419ef75c9a.mp4
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
df4brk2-5f3486a6-6e7e-42e1-a5b1-1b419ef75c9a.mp4
Resource
win10v2004-20230220-en
General
-
Target
df4brk2-5f3486a6-6e7e-42e1-a5b1-1b419ef75c9a.mp4
-
Size
165KB
-
MD5
f5eafcc303576a4344588304f9a0cabd
-
SHA1
dedec3c11406d0356d9c5ea487f39306b95e29d5
-
SHA256
ddbbf34580df55639d25c93409532171c3d4230a7609d5909e1bff1f29979cb0
-
SHA512
502d52cc58fd3d65f4f71e1f220be45a235710a3dc1dd6514c39dff348395e1cc63672b7030b540eb172d50cc5e0be8882080552b981daef2b2df00eaba6c459
-
SSDEEP
3072:2YOSb2U5+6v3Bzq0OCj91PMYi0BsRFBlgo1NaCPl/VhfvAgedFSrK:MSY6v3B2yR1UYzsRFbgouO/jKFQK
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1396 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1396 vlc.exe -
Suspicious use of FindShellTrayWindow 28 IoCs
pid Process 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe 1396 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1396 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\df4brk2-5f3486a6-6e7e-42e1-a5b1-1b419ef75c9a.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1396