Analysis

  • max time kernel
    141s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    10-07-2023 23:17

General

  • Target

    Sploot/Sploot/Sploot/audio/slopslap.mp3

  • Size

    10KB

  • MD5

    79902c033369d43d20ab5028b664f041

  • SHA1

    220bc8a44943d0a6112bd6e81ffcf924c0feabb1

  • SHA256

    971d0e7a90ec8f29f14b3d759e429c9d0432e90a7fad3405cc31b77fe8a65ceb

  • SHA512

    2b737e309d9d08b95fc7a8e1e825c24e1cf2d845b525ecfd3bca044799f43bae137d8993bfd6aca33fe5246f783378ce570a91fff76a4b25b1149eaccebab381

  • SSDEEP

    192:4c+5oL+r/AtFRJ3F2C1o7bsp7G9DguFfpkxL4hG:4mSrMz3Kbspq9DguR2x6G

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Sploot\Sploot\Sploot\audio\slopslap.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2816-59-0x000000013FE20000-0x000000013FF18000-memory.dmp

    Filesize

    992KB

  • memory/2816-60-0x000007FEF7CC0000-0x000007FEF7CF4000-memory.dmp

    Filesize

    208KB

  • memory/2816-61-0x000007FEF6250000-0x000007FEF6504000-memory.dmp

    Filesize

    2.7MB

  • memory/2816-62-0x000007FEFBB40000-0x000007FEFBB58000-memory.dmp

    Filesize

    96KB

  • memory/2816-63-0x000007FEFB540000-0x000007FEFB557000-memory.dmp

    Filesize

    92KB

  • memory/2816-64-0x000007FEF7D50000-0x000007FEF7D61000-memory.dmp

    Filesize

    68KB

  • memory/2816-65-0x000007FEF7CA0000-0x000007FEF7CB7000-memory.dmp

    Filesize

    92KB

  • memory/2816-66-0x000007FEF7C80000-0x000007FEF7C91000-memory.dmp

    Filesize

    68KB

  • memory/2816-67-0x000007FEF7C60000-0x000007FEF7C7D000-memory.dmp

    Filesize

    116KB

  • memory/2816-68-0x000007FEF7B10000-0x000007FEF7B21000-memory.dmp

    Filesize

    68KB

  • memory/2816-69-0x000007FEF6050000-0x000007FEF6250000-memory.dmp

    Filesize

    2.0MB

  • memory/2816-70-0x000007FEF7AD0000-0x000007FEF7B0F000-memory.dmp

    Filesize

    252KB

  • memory/2816-71-0x000007FEF4FA0000-0x000007FEF604B000-memory.dmp

    Filesize

    16.7MB

  • memory/2816-72-0x000007FEF6FA0000-0x000007FEF6FC1000-memory.dmp

    Filesize

    132KB

  • memory/2816-73-0x000007FEF6F80000-0x000007FEF6F98000-memory.dmp

    Filesize

    96KB

  • memory/2816-74-0x000007FEF6F60000-0x000007FEF6F71000-memory.dmp

    Filesize

    68KB

  • memory/2816-75-0x000007FEF6F40000-0x000007FEF6F51000-memory.dmp

    Filesize

    68KB

  • memory/2816-76-0x000007FEF6970000-0x000007FEF6981000-memory.dmp

    Filesize

    68KB

  • memory/2816-77-0x000007FEF6950000-0x000007FEF696B000-memory.dmp

    Filesize

    108KB

  • memory/2816-78-0x000007FEF6930000-0x000007FEF6941000-memory.dmp

    Filesize

    68KB

  • memory/2816-79-0x000007FEF6910000-0x000007FEF6928000-memory.dmp

    Filesize

    96KB

  • memory/2816-80-0x000007FEF68E0000-0x000007FEF6910000-memory.dmp

    Filesize

    192KB

  • memory/2816-81-0x000007FEF4F30000-0x000007FEF4F97000-memory.dmp

    Filesize

    412KB

  • memory/2816-82-0x000007FEF4EC0000-0x000007FEF4F2F000-memory.dmp

    Filesize

    444KB

  • memory/2816-84-0x000007FEF68A0000-0x000007FEF68B7000-memory.dmp

    Filesize

    92KB

  • memory/2816-83-0x000007FEF68C0000-0x000007FEF68D1000-memory.dmp

    Filesize

    68KB

  • memory/2816-85-0x000007FEF6880000-0x000007FEF6891000-memory.dmp

    Filesize

    68KB

  • memory/2816-86-0x000007FEF4E60000-0x000007FEF4EB7000-memory.dmp

    Filesize

    348KB

  • memory/2816-87-0x000007FEF4E30000-0x000007FEF4E5F000-memory.dmp

    Filesize

    188KB

  • memory/2816-88-0x000007FEF4E10000-0x000007FEF4E23000-memory.dmp

    Filesize

    76KB

  • memory/2816-89-0x000007FEF4DF0000-0x000007FEF4E01000-memory.dmp

    Filesize

    68KB

  • memory/2816-90-0x000007FEF4D20000-0x000007FEF4DE5000-memory.dmp

    Filesize

    788KB

  • memory/2816-91-0x000007FEF4D00000-0x000007FEF4D12000-memory.dmp

    Filesize

    72KB

  • memory/2816-92-0x000007FEF4CE0000-0x000007FEF4CF1000-memory.dmp

    Filesize

    68KB

  • memory/2816-93-0x000007FEF4CC0000-0x000007FEF4CD4000-memory.dmp

    Filesize

    80KB

  • memory/2816-94-0x000007FEF4CA0000-0x000007FEF4CB2000-memory.dmp

    Filesize

    72KB

  • memory/2816-95-0x000007FEF4C80000-0x000007FEF4C94000-memory.dmp

    Filesize

    80KB

  • memory/2816-96-0x000007FEF4C60000-0x000007FEF4C7E000-memory.dmp

    Filesize

    120KB

  • memory/2816-97-0x000007FEF4C40000-0x000007FEF4C56000-memory.dmp

    Filesize

    88KB

  • memory/2816-98-0x000007FEF4C20000-0x000007FEF4C35000-memory.dmp

    Filesize

    84KB

  • memory/2816-99-0x000007FEF4C00000-0x000007FEF4C14000-memory.dmp

    Filesize

    80KB

  • memory/2816-100-0x000007FEF4BD0000-0x000007FEF4BFC000-memory.dmp

    Filesize

    176KB

  • memory/2816-101-0x000007FEF4BB0000-0x000007FEF4BC2000-memory.dmp

    Filesize

    72KB

  • memory/2816-102-0x000007FEF4B80000-0x000007FEF4BB0000-memory.dmp

    Filesize

    192KB

  • memory/2816-103-0x000007FEF4B60000-0x000007FEF4B77000-memory.dmp

    Filesize

    92KB

  • memory/2816-104-0x000007FEF33B0000-0x000007FEF4B60000-memory.dmp

    Filesize

    23.7MB

  • memory/2816-106-0x000007FEF3370000-0x000007FEF3382000-memory.dmp

    Filesize

    72KB

  • memory/2816-105-0x000007FEF3390000-0x000007FEF33A1000-memory.dmp

    Filesize

    68KB

  • memory/2816-107-0x000007FEF31F0000-0x000007FEF3368000-memory.dmp

    Filesize

    1.5MB

  • memory/2816-109-0x000007FEF3170000-0x000007FEF31C6000-memory.dmp

    Filesize

    344KB

  • memory/2816-110-0x000007FEF3140000-0x000007FEF3168000-memory.dmp

    Filesize

    160KB

  • memory/2816-108-0x000007FEF31D0000-0x000007FEF31E7000-memory.dmp

    Filesize

    92KB

  • memory/2816-111-0x000007FEF3110000-0x000007FEF3134000-memory.dmp

    Filesize

    144KB

  • memory/2816-112-0x000007FEFAC80000-0x000007FEFAC90000-memory.dmp

    Filesize

    64KB

  • memory/2816-113-0x000007FEF30F0000-0x000007FEF3106000-memory.dmp

    Filesize

    88KB

  • memory/2816-114-0x000007FEF3070000-0x000007FEF30E5000-memory.dmp

    Filesize

    468KB

  • memory/2816-115-0x000007FEF3000000-0x000007FEF3062000-memory.dmp

    Filesize

    392KB

  • memory/2816-116-0x000007FEF2F90000-0x000007FEF2FFD000-memory.dmp

    Filesize

    436KB

  • memory/2816-118-0x000007FEF2F30000-0x000007FEF2F41000-memory.dmp

    Filesize

    68KB

  • memory/2816-117-0x000007FEF2F70000-0x000007FEF2F85000-memory.dmp

    Filesize

    84KB

  • memory/2816-119-0x000007FEF2F10000-0x000007FEF2F22000-memory.dmp

    Filesize

    72KB

  • memory/2816-120-0x000007FEF2D90000-0x000007FEF2F0A000-memory.dmp

    Filesize

    1.5MB