c148c4ae4e093b3653496766f69a01b2fff54fce595836e71373efc8e4ee6794

Analysis

max time kernel
140s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
09-06-2023 18:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

sound4.wav
Size

58KB
MD5

a1205e78e1b273c0355a77de8a5cc6a3
SHA1

e267a41cb563f4d4761fb6d39e0cfce8c81b31b7
SHA256

c3ed890e51dd519972d2c4ddd7634dc99f0c06771a0f0643c5a2ba2e291a0d5f
SHA512

dbac3dcfa8e99d31e0b0ce7ae8c09386aa336d6cef9ce1d6af5b1e204b54ea2f3b41de5cf50923c66408e8207d00830ea1ca4296613909044da1f06436802caa
SSDEEP

1536:gpUTQlNyuAACYOG7jvZ9CjSTg9VsjZ9R/:g+QnAuOqjvTLTgQ7B

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

vlc.exe

pid process

1748 vlc.exe
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

vlc.exe

pid process

1748 vlc.exe

pid	process
1748	vlc.exe

pid	process
1748	vlc.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

Processes:

AUDIODG.EXEvlc.exe

description	pid	process
Token: 33	1312	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1312	AUDIODG.EXE
Token: 33	1312	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1312	AUDIODG.EXE
Token: 33	1748	vlc.exe
Token: SeIncBasePriorityPrivilege	1748	vlc.exe

Suspicious use of FindShellTrayWindow 8 IoCs

Processes:

vlc.exe

pid process

1748 vlc.exe
1748 vlc.exe
1748 vlc.exe
1748 vlc.exe
1748 vlc.exe
1748 vlc.exe
1748 vlc.exe
1748 vlc.exe
Suspicious use of SendNotifyMessage 7 IoCs

Processes:

vlc.exe

pid process

1748 vlc.exe
1748 vlc.exe
1748 vlc.exe
1748 vlc.exe
1748 vlc.exe
1748 vlc.exe
1748 vlc.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

vlc.exe

pid process

1748 vlc.exe

pid	process
1748	vlc.exe
1748	vlc.exe
1748	vlc.exe
1748	vlc.exe
1748	vlc.exe
1748	vlc.exe
1748	vlc.exe
1748	vlc.exe

pid	process
1748	vlc.exe
1748	vlc.exe
1748	vlc.exe
1748	vlc.exe
1748	vlc.exe
1748	vlc.exe
1748	vlc.exe

pid	process
1748	vlc.exe

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\sound4.wav"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1748

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x540
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1312

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1748-59-0x000000013F6F0000-0x000000013F7E8000-memory.dmp

Filesize
992KB

Download
memory/1748-60-0x000007FEFB0F0000-0x000007FEFB124000-memory.dmp

Filesize
208KB

Download
memory/1748-61-0x000007FEF67E0000-0x000007FEF6A94000-memory.dmp

Filesize
2.7MB

Download
memory/1748-62-0x000007FEFBAB0000-0x000007FEFBAC8000-memory.dmp

Filesize
96KB

Download
memory/1748-63-0x000007FEFB0D0000-0x000007FEFB0E7000-memory.dmp

Filesize
92KB

Download
memory/1748-64-0x000007FEFB070000-0x000007FEFB081000-memory.dmp

Filesize
68KB

Download
memory/1748-65-0x000007FEFB050000-0x000007FEFB067000-memory.dmp

Filesize
92KB

Download
memory/1748-66-0x000007FEFAFB0000-0x000007FEFAFC1000-memory.dmp

Filesize
68KB

Download
memory/1748-67-0x000007FEFAF90000-0x000007FEFAFAD000-memory.dmp

Filesize
116KB

Download
memory/1748-68-0x000007FEF64F0000-0x000007FEF66F0000-memory.dmp

Filesize
2.0MB

Download
memory/1748-70-0x000007FEFACB0000-0x000007FEFACEF000-memory.dmp

Filesize
252KB

Download
memory/1748-69-0x000007FEFACF0000-0x000007FEFAD01000-memory.dmp

Filesize
68KB

Download
memory/1748-71-0x000007FEFAC80000-0x000007FEFACA1000-memory.dmp

Filesize
132KB

Download
memory/1748-72-0x000007FEFAC60000-0x000007FEFAC78000-memory.dmp

Filesize
96KB

Download
memory/1748-73-0x000007FEF5440000-0x000007FEF64EB000-memory.dmp

Filesize
16.7MB

Download
memory/1748-74-0x000007FEFAB20000-0x000007FEFAB31000-memory.dmp

Filesize
68KB

Download
memory/1748-75-0x000007FEFAB00000-0x000007FEFAB11000-memory.dmp

Filesize
68KB

Download
memory/1748-76-0x000007FEFAAE0000-0x000007FEFAAF1000-memory.dmp

Filesize
68KB

Download
memory/1748-77-0x000007FEF7750000-0x000007FEF776B000-memory.dmp

Filesize
108KB

Download
memory/1748-78-0x000007FEF7230000-0x000007FEF7241000-memory.dmp

Filesize
68KB

Download
memory/1748-79-0x000007FEF7210000-0x000007FEF7228000-memory.dmp

Filesize
96KB

Download
memory/1748-80-0x000007FEF71E0000-0x000007FEF7210000-memory.dmp

Filesize
192KB

Download
memory/1748-82-0x000007FEF53D0000-0x000007FEF543F000-memory.dmp

Filesize
444KB

Download
memory/1748-81-0x000007FEF6BE0000-0x000007FEF6C47000-memory.dmp

Filesize
412KB

Download
memory/1748-83-0x000007FEF71C0000-0x000007FEF71D1000-memory.dmp

Filesize
68KB

Download
memory/1748-84-0x000007FEF5370000-0x000007FEF53C6000-memory.dmp

Filesize
344KB

Download
memory/1748-85-0x000007FEF7190000-0x000007FEF71B8000-memory.dmp

Filesize
160KB

Download
memory/1748-86-0x000007FEF67B0000-0x000007FEF67D4000-memory.dmp

Filesize
144KB

Download
memory/1748-87-0x000007FEF6BC0000-0x000007FEF6BD7000-memory.dmp

Filesize
92KB

Download
memory/1748-88-0x000007FEF5340000-0x000007FEF5363000-memory.dmp

Filesize
140KB

Download
memory/1748-89-0x000007FEF5320000-0x000007FEF5331000-memory.dmp

Filesize
68KB

Download
memory/1748-90-0x000007FEF5300000-0x000007FEF5312000-memory.dmp

Filesize
72KB

Download
memory/1748-92-0x000007FEF52B0000-0x000007FEF52C3000-memory.dmp

Filesize
76KB

Download
memory/1748-91-0x000007FEF52D0000-0x000007FEF52F1000-memory.dmp

Filesize
132KB

Download
memory/1748-93-0x000007FEF5130000-0x000007FEF52A8000-memory.dmp

Filesize
1.5MB

Download
memory/1748-94-0x000007FEF5110000-0x000007FEF5127000-memory.dmp

Filesize
92KB

Download
memory/1748-95-0x000007FEFB0C0000-0x000007FEFB0D0000-memory.dmp

Filesize
64KB

Download
memory/1748-96-0x000007FEF50E0000-0x000007FEF510F000-memory.dmp

Filesize
188KB

Download
memory/1748-97-0x000007FEF50C0000-0x000007FEF50D1000-memory.dmp

Filesize
68KB

Download
memory/1748-98-0x000007FEF50A0000-0x000007FEF50B6000-memory.dmp

Filesize
88KB

Download
memory/1748-102-0x000007FEF4D00000-0x000007FEF4D12000-memory.dmp

Filesize
72KB

Download
memory/1748-101-0x000007FEF4D20000-0x000007FEF4D32000-memory.dmp

Filesize
72KB

Download
memory/1748-103-0x000007FEF4B80000-0x000007FEF4CFA000-memory.dmp

Filesize
1.5MB

Download
memory/1748-104-0x000007FEF4B60000-0x000007FEF4B73000-memory.dmp

Filesize
76KB

Download
memory/1748-100-0x000007FEF4D40000-0x000007FEF4D51000-memory.dmp

Filesize
68KB

Download
memory/1748-106-0x000007FEF4B20000-0x000007FEF4B31000-memory.dmp

Filesize
68KB

Download
memory/1748-107-0x000007FEF4B00000-0x000007FEF4B11000-memory.dmp

Filesize
68KB

Download
memory/1748-108-0x000007FEF4AE0000-0x000007FEF4AF1000-memory.dmp

Filesize
68KB

Download
memory/1748-109-0x000007FEF4AC0000-0x000007FEF4AD6000-memory.dmp

Filesize
88KB

Download
memory/1748-105-0x000007FEF4B40000-0x000007FEF4B54000-memory.dmp

Filesize
80KB

Download
memory/1748-99-0x000007FEF5080000-0x000007FEF5095000-memory.dmp

Filesize
84KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads