Analysis

  • max time kernel
    142s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    31/08/2023, 06:01

General

  • Target

    ParaElGrupo124.mp4

  • Size

    2.5MB

  • MD5

    fa55813c00056c302f4baccc33893a08

  • SHA1

    d75f921d629a3cac1d9c671f91dea096e4e15f84

  • SHA256

    80b3c9d26a278f66a4b2b582ff4ac3d40af57681e7533e20f0364aac4f8b265a

  • SHA512

    15deeceea13b3b5053c5faaf57782138d24b521349627977c9e3590d476ed5e45f7e810c582abc21b96586f726b838d559daa3a48555efd5e3ecf8d9b9eff8d3

  • SSDEEP

    49152:lZGNX87FnbhYIxQbwqdzm4AA9l5HiuS6zm89oaHf5sn9zp4IN7AX:lM+hY/bxdntHYh8HBs9zpP7AX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 30 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\ParaElGrupo124.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2672

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2672-5-0x000000013F310000-0x000000013F408000-memory.dmp

          Filesize

          992KB

        • memory/2672-6-0x000007FEFABC0000-0x000007FEFABF4000-memory.dmp

          Filesize

          208KB

        • memory/2672-7-0x000007FEF5940000-0x000007FEF5BF4000-memory.dmp

          Filesize

          2.7MB

        • memory/2672-8-0x000007FEFB4D0000-0x000007FEFB4E8000-memory.dmp

          Filesize

          96KB

        • memory/2672-9-0x000007FEFACB0000-0x000007FEFACC7000-memory.dmp

          Filesize

          92KB

        • memory/2672-10-0x000007FEF7100000-0x000007FEF7111000-memory.dmp

          Filesize

          68KB

        • memory/2672-11-0x000007FEF70E0000-0x000007FEF70F7000-memory.dmp

          Filesize

          92KB

        • memory/2672-12-0x000007FEF70C0000-0x000007FEF70D1000-memory.dmp

          Filesize

          68KB

        • memory/2672-13-0x000007FEF66D0000-0x000007FEF66ED000-memory.dmp

          Filesize

          116KB

        • memory/2672-14-0x000007FEF6570000-0x000007FEF6581000-memory.dmp

          Filesize

          68KB

        • memory/2672-15-0x000007FEF5740000-0x000007FEF5940000-memory.dmp

          Filesize

          2.0MB

        • memory/2672-16-0x000007FEF6530000-0x000007FEF656F000-memory.dmp

          Filesize

          252KB

        • memory/2672-18-0x000007FEF6050000-0x000007FEF6071000-memory.dmp

          Filesize

          132KB

        • memory/2672-20-0x000007FEF6030000-0x000007FEF6041000-memory.dmp

          Filesize

          68KB

        • memory/2672-22-0x000007FEF5FF0000-0x000007FEF6001000-memory.dmp

          Filesize

          68KB

        • memory/2672-24-0x000007FEF5FB0000-0x000007FEF5FC1000-memory.dmp

          Filesize

          68KB

        • memory/2672-23-0x000007FEF5FD0000-0x000007FEF5FEB000-memory.dmp

          Filesize

          108KB

        • memory/2672-21-0x000007FEF6010000-0x000007FEF6021000-memory.dmp

          Filesize

          68KB

        • memory/2672-25-0x000007FEF5F90000-0x000007FEF5FA8000-memory.dmp

          Filesize

          96KB

        • memory/2672-19-0x000007FEF60F0000-0x000007FEF6108000-memory.dmp

          Filesize

          96KB

        • memory/2672-17-0x000007FEF4690000-0x000007FEF573B000-memory.dmp

          Filesize

          16.7MB

        • memory/2672-26-0x000007FEF4660000-0x000007FEF4690000-memory.dmp

          Filesize

          192KB

        • memory/2672-27-0x000007FEF45F0000-0x000007FEF4657000-memory.dmp

          Filesize

          412KB

        • memory/2672-29-0x000007FEF5F70000-0x000007FEF5F81000-memory.dmp

          Filesize

          68KB

        • memory/2672-28-0x000007FEF4580000-0x000007FEF45EF000-memory.dmp

          Filesize

          444KB

        • memory/2672-30-0x000007FEF4520000-0x000007FEF4576000-memory.dmp

          Filesize

          344KB

        • memory/2672-31-0x000007FEF43A0000-0x000007FEF4518000-memory.dmp

          Filesize

          1.5MB

        • memory/2672-32-0x000007FEF4380000-0x000007FEF4397000-memory.dmp

          Filesize

          92KB

        • memory/2672-34-0x000007FEF41F0000-0x000007FEF4202000-memory.dmp

          Filesize

          72KB

        • memory/2672-33-0x000007FEF4210000-0x000007FEF4380000-memory.dmp

          Filesize

          1.4MB

        • memory/2672-35-0x000007FEF41A0000-0x000007FEF41E2000-memory.dmp

          Filesize

          264KB

        • memory/2672-36-0x000007FEF4150000-0x000007FEF419C000-memory.dmp

          Filesize

          304KB

        • memory/2672-37-0x000007FEF3FE0000-0x000007FEF414B000-memory.dmp

          Filesize

          1.4MB

        • memory/2672-38-0x000007FEF3F80000-0x000007FEF3FD7000-memory.dmp

          Filesize

          348KB

        • memory/2672-39-0x000007FEF3D30000-0x000007FEF3F7B000-memory.dmp

          Filesize

          2.3MB

        • memory/2672-40-0x000007FEF2580000-0x000007FEF3D30000-memory.dmp

          Filesize

          23.7MB

        • memory/2672-41-0x000007FEFADA0000-0x000007FEFADB0000-memory.dmp

          Filesize

          64KB

        • memory/2672-42-0x000007FEF2550000-0x000007FEF257F000-memory.dmp

          Filesize

          188KB

        • memory/2672-44-0x000007FEF2510000-0x000007FEF2526000-memory.dmp

          Filesize

          88KB

        • memory/2672-43-0x000007FEF2530000-0x000007FEF2541000-memory.dmp

          Filesize

          68KB

        • memory/2672-45-0x000007FEF2440000-0x000007FEF2505000-memory.dmp

          Filesize

          788KB

        • memory/2672-46-0x000007FEF23C0000-0x000007FEF2435000-memory.dmp

          Filesize

          468KB

        • memory/2672-47-0x000007FEF2350000-0x000007FEF23B2000-memory.dmp

          Filesize

          392KB

        • memory/2672-52-0x000007FEF2230000-0x000007FEF2245000-memory.dmp

          Filesize

          84KB

        • memory/2672-51-0x000007FEF2250000-0x000007FEF22A0000-memory.dmp

          Filesize

          320KB

        • memory/2672-50-0x000007FEF22A0000-0x000007FEF22B4000-memory.dmp

          Filesize

          80KB

        • memory/2672-49-0x000007FEF22C0000-0x000007FEF22D3000-memory.dmp

          Filesize

          76KB

        • memory/2672-48-0x000007FEF22E0000-0x000007FEF234D000-memory.dmp

          Filesize

          436KB

        • memory/2672-54-0x000007FEF1FF0000-0x000007FEF2005000-memory.dmp

          Filesize

          84KB

        • memory/2672-55-0x000007FEF1FA0000-0x000007FEF1FC3000-memory.dmp

          Filesize

          140KB

        • memory/2672-53-0x000007FEF2010000-0x000007FEF222D000-memory.dmp

          Filesize

          2.1MB

        • memory/2672-56-0x000007FEF1F80000-0x000007FEF1F93000-memory.dmp

          Filesize

          76KB

        • memory/2672-57-0x000007FEF1F60000-0x000007FEF1F71000-memory.dmp

          Filesize

          68KB

        • memory/2672-58-0x000007FEF1F40000-0x000007FEF1F52000-memory.dmp

          Filesize

          72KB

        • memory/2672-59-0x000007FEF1E40000-0x000007FEF1F34000-memory.dmp

          Filesize

          976KB

        • memory/2672-60-0x000007FEF1CC0000-0x000007FEF1E3A000-memory.dmp

          Filesize

          1.5MB

        • memory/2672-62-0x000007FEF1C70000-0x000007FEF1C83000-memory.dmp

          Filesize

          76KB

        • memory/2672-61-0x000007FEF1C90000-0x000007FEF1CBA000-memory.dmp

          Filesize

          168KB

        • memory/2672-63-0x000007FEF1C50000-0x000007FEF1C6B000-memory.dmp

          Filesize

          108KB

        • memory/2672-64-0x000007FEF1C30000-0x000007FEF1C42000-memory.dmp

          Filesize

          72KB

        • memory/2672-65-0x000007FEF1C10000-0x000007FEF1C25000-memory.dmp

          Filesize

          84KB

        • memory/2672-66-0x000007FEF1BF0000-0x000007FEF1C03000-memory.dmp

          Filesize

          76KB

        • memory/2672-67-0x000007FEF1BD0000-0x000007FEF1BE4000-memory.dmp

          Filesize

          80KB

        • memory/2672-68-0x000007FEF1BB0000-0x000007FEF1BC2000-memory.dmp

          Filesize

          72KB