Resubmissions

24-05-2023 15:06

230524-sg7hgada72 6

05-05-2023 19:51

230505-yk45eaag22 1

05-05-2023 19:47

230505-yhzf5sce61 6

05-05-2023 19:44

230505-yf7dzaac46 6

05-05-2023 19:37

230505-yb75psca8t 6

05-05-2023 19:34

230505-x989zsbg8y 6

05-05-2023 19:33

230505-x9hr2ahf39 6

05-05-2023 18:11

230505-wsxn7aea5s 6

05-05-2023 17:09

230505-vpajtabe99 6

Analysis

  • max time kernel
    143s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    05-05-2023 19:34

General

  • Target

    df4brk2-5f3486a6-6e7e-42e1-a5b1-1b419ef75c9a.mp4

  • Size

    165KB

  • MD5

    f5eafcc303576a4344588304f9a0cabd

  • SHA1

    dedec3c11406d0356d9c5ea487f39306b95e29d5

  • SHA256

    ddbbf34580df55639d25c93409532171c3d4230a7609d5909e1bff1f29979cb0

  • SHA512

    502d52cc58fd3d65f4f71e1f220be45a235710a3dc1dd6514c39dff348395e1cc63672b7030b540eb172d50cc5e0be8882080552b981daef2b2df00eaba6c459

  • SSDEEP

    3072:2YOSb2U5+6v3Bzq0OCj91PMYi0BsRFBlgo1NaCPl/VhfvAgedFSrK:MSY6v3B2yR1UYzsRFbgouO/jKFQK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 28 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\df4brk2-5f3486a6-6e7e-42e1-a5b1-1b419ef75c9a.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1396-54-0x000000013FBB0000-0x000000013FCA8000-memory.dmp

    Filesize

    992KB

  • memory/1396-56-0x000007FEFB840000-0x000007FEFB874000-memory.dmp

    Filesize

    208KB

  • memory/1396-57-0x000007FEF6F90000-0x000007FEF7244000-memory.dmp

    Filesize

    2.7MB

  • memory/1396-62-0x000007FEFBD80000-0x000007FEFBD98000-memory.dmp

    Filesize

    96KB

  • memory/1396-63-0x000007FEFB7C0000-0x000007FEFB7D7000-memory.dmp

    Filesize

    92KB

  • memory/1396-64-0x000007FEFB7A0000-0x000007FEFB7B1000-memory.dmp

    Filesize

    68KB

  • memory/1396-65-0x000007FEFB780000-0x000007FEFB797000-memory.dmp

    Filesize

    92KB

  • memory/1396-66-0x000007FEFB670000-0x000007FEFB681000-memory.dmp

    Filesize

    68KB

  • memory/1396-67-0x000007FEFB650000-0x000007FEFB66D000-memory.dmp

    Filesize

    116KB

  • memory/1396-68-0x000007FEFB630000-0x000007FEFB641000-memory.dmp

    Filesize

    68KB

  • memory/1396-69-0x000007FEF6D90000-0x000007FEF6F90000-memory.dmp

    Filesize

    2.0MB

  • memory/1396-70-0x000007FEF5510000-0x000007FEF65BB000-memory.dmp

    Filesize

    16.7MB

  • memory/1396-71-0x000007FEFB590000-0x000007FEFB5CF000-memory.dmp

    Filesize

    252KB

  • memory/1396-72-0x000007FEFB560000-0x000007FEFB581000-memory.dmp

    Filesize

    132KB

  • memory/1396-73-0x000007FEFB610000-0x000007FEFB628000-memory.dmp

    Filesize

    96KB

  • memory/1396-74-0x000007FEFB540000-0x000007FEFB551000-memory.dmp

    Filesize

    68KB

  • memory/1396-75-0x000007FEFB340000-0x000007FEFB351000-memory.dmp

    Filesize

    68KB

  • memory/1396-76-0x000007FEFB320000-0x000007FEFB331000-memory.dmp

    Filesize

    68KB

  • memory/1396-77-0x000007FEF73E0000-0x000007FEF73FB000-memory.dmp

    Filesize

    108KB

  • memory/1396-78-0x000007FEF73C0000-0x000007FEF73D1000-memory.dmp

    Filesize

    68KB

  • memory/1396-79-0x000007FEF73A0000-0x000007FEF73B8000-memory.dmp

    Filesize

    96KB

  • memory/1396-80-0x000007FEF7370000-0x000007FEF73A0000-memory.dmp

    Filesize

    192KB

  • memory/1396-81-0x000007FEF6D20000-0x000007FEF6D87000-memory.dmp

    Filesize

    412KB

  • memory/1396-82-0x000007FEF6CB0000-0x000007FEF6D1F000-memory.dmp

    Filesize

    444KB

  • memory/1396-83-0x000007FEF6C90000-0x000007FEF6CA1000-memory.dmp

    Filesize

    68KB

  • memory/1396-84-0x000007FEF6C30000-0x000007FEF6C86000-memory.dmp

    Filesize

    344KB

  • memory/1396-85-0x000007FEF6AB0000-0x000007FEF6C28000-memory.dmp

    Filesize

    1.5MB

  • memory/1396-86-0x000007FEF6A90000-0x000007FEF6AA7000-memory.dmp

    Filesize

    92KB

  • memory/1396-87-0x000007FEF6920000-0x000007FEF6A90000-memory.dmp

    Filesize

    1.4MB

  • memory/1396-88-0x000007FEF6900000-0x000007FEF6912000-memory.dmp

    Filesize

    72KB

  • memory/1396-89-0x000007FEF68B0000-0x000007FEF68F2000-memory.dmp

    Filesize

    264KB

  • memory/1396-90-0x000007FEF6860000-0x000007FEF68AC000-memory.dmp

    Filesize

    304KB

  • memory/1396-91-0x000007FEF66F0000-0x000007FEF685B000-memory.dmp

    Filesize

    1.4MB

  • memory/1396-92-0x000007FEF6690000-0x000007FEF66E7000-memory.dmp

    Filesize

    348KB

  • memory/1396-93-0x000007FEF52C0000-0x000007FEF550B000-memory.dmp

    Filesize

    2.3MB

  • memory/1396-94-0x000007FEF3B10000-0x000007FEF52C0000-memory.dmp

    Filesize

    23.7MB

  • memory/1396-95-0x000007FEF38F0000-0x000007FEF3B0D000-memory.dmp

    Filesize

    2.1MB

  • memory/1396-96-0x000007FEF38D0000-0x000007FEF38E5000-memory.dmp

    Filesize

    84KB

  • memory/1396-97-0x000007FEF38A0000-0x000007FEF38C3000-memory.dmp

    Filesize

    140KB

  • memory/1396-98-0x000007FEF3880000-0x000007FEF3893000-memory.dmp

    Filesize

    76KB

  • memory/1396-99-0x000007FEF3780000-0x000007FEF3874000-memory.dmp

    Filesize

    976KB

  • memory/1396-100-0x000007FEF3750000-0x000007FEF377A000-memory.dmp

    Filesize

    168KB

  • memory/1396-101-0x000007FEF3730000-0x000007FEF3743000-memory.dmp

    Filesize

    76KB

  • memory/1396-102-0x000007FEF3710000-0x000007FEF372B000-memory.dmp

    Filesize

    108KB

  • memory/1396-103-0x000007FEF36F0000-0x000007FEF3702000-memory.dmp

    Filesize

    72KB

  • memory/1396-104-0x000007FEF36D0000-0x000007FEF36E5000-memory.dmp

    Filesize

    84KB

  • memory/1396-105-0x000007FEF36B0000-0x000007FEF36C3000-memory.dmp

    Filesize

    76KB

  • memory/1396-106-0x000007FEF3690000-0x000007FEF36A4000-memory.dmp

    Filesize

    80KB

  • memory/1396-109-0x000007FEF6F90000-0x000007FEF7244000-memory.dmp

    Filesize

    2.7MB

  • memory/1396-118-0x000007FEF5510000-0x000007FEF65BB000-memory.dmp

    Filesize

    16.7MB