Analysis

  • max time kernel
    111s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    23-08-2023 08:56

General

  • Target

    arabic_nokia_ring.mp3

  • Size

    234KB

  • MD5

    d36e4e3bfd228af775a2a3fa19132fd8

  • SHA1

    0aef5c3115ff16b63870089130eae3a1b5b06eb2

  • SHA256

    da90474b89bf8cbb94612a8d01ba438f7de922fb5379596ca6ce371dab330a16

  • SHA512

    767a47fb7f0b8b2fb30ed94541d67b9e9acfd71818bfe75c37a47eedac0ee465b4eb526748233aa4079aaf0527ab29a0ec7d81ad71ebb60a8040a12a29e4b559

  • SSDEEP

    6144:5FEH5HrV2OqGD0KC2Y1iZFocYcUo302Z43TB:XEH5LYOqyDC/4oNcX302ZaTB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\arabic_nokia_ring.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2800-59-0x000000013F0F0000-0x000000013F1E8000-memory.dmp

    Filesize

    992KB

  • memory/2800-60-0x000007FEFAEE0000-0x000007FEFAF14000-memory.dmp

    Filesize

    208KB

  • memory/2800-61-0x000007FEF60E0000-0x000007FEF6394000-memory.dmp

    Filesize

    2.7MB

  • memory/2800-62-0x000007FEFBDF0000-0x000007FEFBE08000-memory.dmp

    Filesize

    96KB

  • memory/2800-63-0x000007FEFB0B0000-0x000007FEFB0C7000-memory.dmp

    Filesize

    92KB

  • memory/2800-64-0x000007FEFAC20000-0x000007FEFAC31000-memory.dmp

    Filesize

    68KB

  • memory/2800-65-0x000007FEFAC00000-0x000007FEFAC17000-memory.dmp

    Filesize

    92KB

  • memory/2800-68-0x000007FEF7AD0000-0x000007FEF7AE1000-memory.dmp

    Filesize

    68KB

  • memory/2800-67-0x000007FEF7AF0000-0x000007FEF7B0D000-memory.dmp

    Filesize

    116KB

  • memory/2800-66-0x000007FEFABE0000-0x000007FEFABF1000-memory.dmp

    Filesize

    68KB

  • memory/2800-69-0x000007FEF5030000-0x000007FEF60DB000-memory.dmp

    Filesize

    16.7MB

  • memory/2800-70-0x000007FEF4E30000-0x000007FEF5030000-memory.dmp

    Filesize

    2.0MB

  • memory/2800-72-0x000007FEF7850000-0x000007FEF7871000-memory.dmp

    Filesize

    132KB

  • memory/2800-86-0x000007FEF4DD0000-0x000007FEF4E27000-memory.dmp

    Filesize

    348KB

  • memory/2800-85-0x000007FEF6CC0000-0x000007FEF6CD1000-memory.dmp

    Filesize

    68KB

  • memory/2800-89-0x000007FEF6860000-0x000007FEF6871000-memory.dmp

    Filesize

    68KB

  • memory/2800-88-0x000007FEF6CA0000-0x000007FEF6CB3000-memory.dmp

    Filesize

    76KB

  • memory/2800-87-0x000007FEF6710000-0x000007FEF673F000-memory.dmp

    Filesize

    188KB

  • memory/2800-84-0x000007FEF6CE0000-0x000007FEF6CF7000-memory.dmp

    Filesize

    92KB

  • memory/2800-83-0x000007FEF7290000-0x000007FEF72A1000-memory.dmp

    Filesize

    68KB

  • memory/2800-82-0x000007FEF6740000-0x000007FEF67AF000-memory.dmp

    Filesize

    444KB

  • memory/2800-81-0x000007FEF67B0000-0x000007FEF6817000-memory.dmp

    Filesize

    412KB

  • memory/2800-80-0x000007FEF6D00000-0x000007FEF6D30000-memory.dmp

    Filesize

    192KB

  • memory/2800-79-0x000007FEF72B0000-0x000007FEF72C8000-memory.dmp

    Filesize

    96KB

  • memory/2800-78-0x000007FEF72D0000-0x000007FEF72E1000-memory.dmp

    Filesize

    68KB

  • memory/2800-77-0x000007FEF72F0000-0x000007FEF730B000-memory.dmp

    Filesize

    108KB

  • memory/2800-76-0x000007FEF7310000-0x000007FEF7321000-memory.dmp

    Filesize

    68KB

  • memory/2800-75-0x000007FEF7830000-0x000007FEF7841000-memory.dmp

    Filesize

    68KB

  • memory/2800-74-0x000007FEF7A10000-0x000007FEF7A21000-memory.dmp

    Filesize

    68KB

  • memory/2800-73-0x000007FEF7AB0000-0x000007FEF7AC8000-memory.dmp

    Filesize

    96KB

  • memory/2800-71-0x000007FEF7A30000-0x000007FEF7A6F000-memory.dmp

    Filesize

    252KB

  • memory/2800-90-0x000007FEF4D00000-0x000007FEF4DC5000-memory.dmp

    Filesize

    788KB

  • memory/2800-99-0x000007FEF4BE0000-0x000007FEF4BF4000-memory.dmp

    Filesize

    80KB

  • memory/2800-98-0x000007FEF4C00000-0x000007FEF4C15000-memory.dmp

    Filesize

    84KB

  • memory/2800-97-0x000007FEF4C20000-0x000007FEF4C36000-memory.dmp

    Filesize

    88KB

  • memory/2800-96-0x000007FEF4C40000-0x000007FEF4C5E000-memory.dmp

    Filesize

    120KB

  • memory/2800-95-0x000007FEF4C60000-0x000007FEF4C74000-memory.dmp

    Filesize

    80KB

  • memory/2800-94-0x000007FEF4C80000-0x000007FEF4C92000-memory.dmp

    Filesize

    72KB

  • memory/2800-93-0x000007FEF4CA0000-0x000007FEF4CB4000-memory.dmp

    Filesize

    80KB

  • memory/2800-92-0x000007FEF4CC0000-0x000007FEF4CD1000-memory.dmp

    Filesize

    68KB

  • memory/2800-91-0x000007FEF4CE0000-0x000007FEF4CF2000-memory.dmp

    Filesize

    72KB

  • memory/2800-101-0x000007FEF4B90000-0x000007FEF4BA2000-memory.dmp

    Filesize

    72KB

  • memory/2800-102-0x000007FEF4B60000-0x000007FEF4B90000-memory.dmp

    Filesize

    192KB

  • memory/2800-103-0x000007FEF4B40000-0x000007FEF4B57000-memory.dmp

    Filesize

    92KB

  • memory/2800-100-0x000007FEF4BB0000-0x000007FEF4BDC000-memory.dmp

    Filesize

    176KB

  • memory/2800-104-0x000007FEF3390000-0x000007FEF4B40000-memory.dmp

    Filesize

    23.7MB

  • memory/2800-106-0x000007FEF3350000-0x000007FEF3362000-memory.dmp

    Filesize

    72KB

  • memory/2800-105-0x000007FEF3370000-0x000007FEF3381000-memory.dmp

    Filesize

    68KB

  • memory/2800-107-0x000007FEF31D0000-0x000007FEF3348000-memory.dmp

    Filesize

    1.5MB

  • memory/2800-114-0x000007FEF3050000-0x000007FEF30C5000-memory.dmp

    Filesize

    468KB

  • memory/2800-113-0x000007FEF30D0000-0x000007FEF30E6000-memory.dmp

    Filesize

    88KB

  • memory/2800-112-0x000007FEFB1E0000-0x000007FEFB1F0000-memory.dmp

    Filesize

    64KB

  • memory/2800-111-0x000007FEF30F0000-0x000007FEF3114000-memory.dmp

    Filesize

    144KB

  • memory/2800-110-0x000007FEF3120000-0x000007FEF3148000-memory.dmp

    Filesize

    160KB

  • memory/2800-109-0x000007FEF3150000-0x000007FEF31A6000-memory.dmp

    Filesize

    344KB

  • memory/2800-108-0x000007FEF31B0000-0x000007FEF31C7000-memory.dmp

    Filesize

    92KB

  • memory/2800-119-0x000007FEF2EF0000-0x000007FEF2F02000-memory.dmp

    Filesize

    72KB

  • memory/2800-118-0x000007FEF2F30000-0x000007FEF2F41000-memory.dmp

    Filesize

    68KB

  • memory/2800-117-0x000007FEF2F50000-0x000007FEF2F65000-memory.dmp

    Filesize

    84KB

  • memory/2800-116-0x000007FEF2F70000-0x000007FEF2FDD000-memory.dmp

    Filesize

    436KB

  • memory/2800-115-0x000007FEF2FE0000-0x000007FEF3042000-memory.dmp

    Filesize

    392KB

  • memory/2800-120-0x000007FEF2D70000-0x000007FEF2EEA000-memory.dmp

    Filesize

    1.5MB