Analysis

  • max time kernel
    141s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2023, 23:17

General

  • Target

    Sploot/Sploot/Sploot/audio/smack.mp3

  • Size

    3KB

  • MD5

    f792e0215ff793cbb966586686898041

  • SHA1

    e58e769836b7d03c077f53951ea71080fface925

  • SHA256

    dc9b5750ac1b8892930e43d77f736602146f0b7b080219054fc0ff23b2bd2676

  • SHA512

    8b9311d556bc14752a5353e68deff468aa4a13dc3ca1a251a8cd93c19d9a3b1b01a79e231a605d08edaaa342938a3b61aeaba6716f59747663cf1a3ee2321773

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Sploot\Sploot\Sploot\audio\smack.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2316-58-0x000000013F720000-0x000000013F818000-memory.dmp

    Filesize

    992KB

  • memory/2316-59-0x000007FEFABB0000-0x000007FEFABE4000-memory.dmp

    Filesize

    208KB

  • memory/2316-60-0x000007FEF5C10000-0x000007FEF5EC4000-memory.dmp

    Filesize

    2.7MB

  • memory/2316-62-0x000007FEFAB90000-0x000007FEFABA7000-memory.dmp

    Filesize

    92KB

  • memory/2316-61-0x000007FEFB5F0000-0x000007FEFB608000-memory.dmp

    Filesize

    96KB

  • memory/2316-63-0x000007FEFAB70000-0x000007FEFAB81000-memory.dmp

    Filesize

    68KB

  • memory/2316-64-0x000007FEFA750000-0x000007FEFA767000-memory.dmp

    Filesize

    92KB

  • memory/2316-65-0x000007FEFA730000-0x000007FEFA741000-memory.dmp

    Filesize

    68KB

  • memory/2316-66-0x000007FEFA710000-0x000007FEFA72D000-memory.dmp

    Filesize

    116KB

  • memory/2316-67-0x000007FEF7620000-0x000007FEF7631000-memory.dmp

    Filesize

    68KB

  • memory/2316-68-0x000007FEF4B60000-0x000007FEF5C0B000-memory.dmp

    Filesize

    16.7MB

  • memory/2316-69-0x000007FEF4960000-0x000007FEF4B60000-memory.dmp

    Filesize

    2.0MB

  • memory/2316-72-0x000007FEF75C0000-0x000007FEF75D8000-memory.dmp

    Filesize

    96KB

  • memory/2316-71-0x000007FEF7550000-0x000007FEF7571000-memory.dmp

    Filesize

    132KB

  • memory/2316-70-0x000007FEF75E0000-0x000007FEF761F000-memory.dmp

    Filesize

    252KB

  • memory/2316-73-0x000007FEF7530000-0x000007FEF7541000-memory.dmp

    Filesize

    68KB

  • memory/2316-74-0x000007FEF7370000-0x000007FEF7381000-memory.dmp

    Filesize

    68KB

  • memory/2316-75-0x000007FEF7350000-0x000007FEF7361000-memory.dmp

    Filesize

    68KB

  • memory/2316-76-0x000007FEF6E20000-0x000007FEF6E3B000-memory.dmp

    Filesize

    108KB

  • memory/2316-77-0x000007FEF6E00000-0x000007FEF6E11000-memory.dmp

    Filesize

    68KB

  • memory/2316-78-0x000007FEF6DE0000-0x000007FEF6DF8000-memory.dmp

    Filesize

    96KB

  • memory/2316-79-0x000007FEF6DB0000-0x000007FEF6DE0000-memory.dmp

    Filesize

    192KB

  • memory/2316-80-0x000007FEF67D0000-0x000007FEF6837000-memory.dmp

    Filesize

    412KB

  • memory/2316-81-0x000007FEF62E0000-0x000007FEF634F000-memory.dmp

    Filesize

    444KB

  • memory/2316-82-0x000007FEF67B0000-0x000007FEF67C1000-memory.dmp

    Filesize

    68KB

  • memory/2316-84-0x000007FEF62A0000-0x000007FEF62B1000-memory.dmp

    Filesize

    68KB

  • memory/2316-83-0x000007FEF62C0000-0x000007FEF62D7000-memory.dmp

    Filesize

    92KB

  • memory/2316-87-0x000007FEF4910000-0x000007FEF4923000-memory.dmp

    Filesize

    76KB

  • memory/2316-86-0x000007FEF4930000-0x000007FEF495F000-memory.dmp

    Filesize

    188KB

  • memory/2316-88-0x000007FEF48F0000-0x000007FEF4901000-memory.dmp

    Filesize

    68KB

  • memory/2316-85-0x000007FEF6240000-0x000007FEF6297000-memory.dmp

    Filesize

    348KB

  • memory/2316-89-0x000007FEF4820000-0x000007FEF48E5000-memory.dmp

    Filesize

    788KB

  • memory/2316-90-0x000007FEF4800000-0x000007FEF4812000-memory.dmp

    Filesize

    72KB

  • memory/2316-91-0x000007FEF47E0000-0x000007FEF47F1000-memory.dmp

    Filesize

    68KB

  • memory/2316-92-0x000007FEF47C0000-0x000007FEF47D4000-memory.dmp

    Filesize

    80KB

  • memory/2316-93-0x000007FEF47A0000-0x000007FEF47B2000-memory.dmp

    Filesize

    72KB

  • memory/2316-94-0x000007FEF4780000-0x000007FEF4794000-memory.dmp

    Filesize

    80KB

  • memory/2316-95-0x000007FEF4760000-0x000007FEF477E000-memory.dmp

    Filesize

    120KB

  • memory/2316-96-0x000007FEF4740000-0x000007FEF4756000-memory.dmp

    Filesize

    88KB

  • memory/2316-97-0x000007FEF4720000-0x000007FEF4735000-memory.dmp

    Filesize

    84KB

  • memory/2316-98-0x000007FEF4700000-0x000007FEF4714000-memory.dmp

    Filesize

    80KB

  • memory/2316-99-0x000007FEF46D0000-0x000007FEF46FC000-memory.dmp

    Filesize

    176KB

  • memory/2316-100-0x000007FEF46B0000-0x000007FEF46C2000-memory.dmp

    Filesize

    72KB

  • memory/2316-101-0x000007FEF4680000-0x000007FEF46B0000-memory.dmp

    Filesize

    192KB

  • memory/2316-102-0x000007FEF4660000-0x000007FEF4677000-memory.dmp

    Filesize

    92KB

  • memory/2316-103-0x000007FEF2EB0000-0x000007FEF4660000-memory.dmp

    Filesize

    23.7MB

  • memory/2316-104-0x000007FEF2E90000-0x000007FEF2EA1000-memory.dmp

    Filesize

    68KB

  • memory/2316-105-0x000007FEF2E70000-0x000007FEF2E82000-memory.dmp

    Filesize

    72KB

  • memory/2316-106-0x000007FEF2CF0000-0x000007FEF2E68000-memory.dmp

    Filesize

    1.5MB

  • memory/2316-107-0x000007FEF2CD0000-0x000007FEF2CE7000-memory.dmp

    Filesize

    92KB

  • memory/2316-108-0x000007FEF2C70000-0x000007FEF2CC6000-memory.dmp

    Filesize

    344KB

  • memory/2316-109-0x000007FEF2C40000-0x000007FEF2C68000-memory.dmp

    Filesize

    160KB

  • memory/2316-110-0x000007FEF2C10000-0x000007FEF2C34000-memory.dmp

    Filesize

    144KB

  • memory/2316-117-0x000007FEF2A30000-0x000007FEF2A41000-memory.dmp

    Filesize

    68KB

  • memory/2316-116-0x000007FEF2A70000-0x000007FEF2A85000-memory.dmp

    Filesize

    84KB

  • memory/2316-115-0x000007FEF2A90000-0x000007FEF2AFD000-memory.dmp

    Filesize

    436KB

  • memory/2316-114-0x000007FEF2B00000-0x000007FEF2B62000-memory.dmp

    Filesize

    392KB

  • memory/2316-113-0x000007FEF2B70000-0x000007FEF2BE5000-memory.dmp

    Filesize

    468KB

  • memory/2316-112-0x000007FEF2BF0000-0x000007FEF2C06000-memory.dmp

    Filesize

    88KB

  • memory/2316-111-0x000007FEFAD80000-0x000007FEFAD90000-memory.dmp

    Filesize

    64KB

  • memory/2316-118-0x000007FEF2A10000-0x000007FEF2A22000-memory.dmp

    Filesize

    72KB

  • memory/2316-119-0x000007FEF2890000-0x000007FEF2A0A000-memory.dmp

    Filesize

    1.5MB

  • memory/2316-120-0x000007FEF2870000-0x000007FEF2883000-memory.dmp

    Filesize

    76KB

  • memory/2316-121-0x000007FEF2850000-0x000007FEF2864000-memory.dmp

    Filesize

    80KB