Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    02/09/2023, 05:44

General

  • Target

    1min_2.mp3

  • Size

    1.5MB

  • MD5

    4fe6ab084e5a735e0dcb7f7be3e5532b

  • SHA1

    1909d72c91638561aa3d3fbf7b5f22272c51095c

  • SHA256

    30ccda753fe39cc8c99cfaef948869f47f0251daf6d1180fbb717a3e6e26b8bf

  • SHA512

    48f08183b19c0b4eb343b120d00f61a04ba2f2c7bc0630bb6b3e6c925412d923e21ed2a878006e3d89261a7222e11b92a3c282ffbcf6c582031861220ca59b2f

  • SSDEEP

    49152:LF6bphlsCYe7btVmVi/IYdmOQ3GJvNWtdoH:Lc7XYUbXiiQ6A3q1YmH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\1min_2.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2148

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2148-5-0x000000013FCF0000-0x000000013FDE8000-memory.dmp

          Filesize

          992KB

        • memory/2148-6-0x000007FEF7B40000-0x000007FEF7B74000-memory.dmp

          Filesize

          208KB

        • memory/2148-7-0x000007FEF5EE0000-0x000007FEF6194000-memory.dmp

          Filesize

          2.7MB

        • memory/2148-8-0x000007FEFBD80000-0x000007FEFBD98000-memory.dmp

          Filesize

          96KB

        • memory/2148-12-0x000007FEF7AE0000-0x000007FEF7AF1000-memory.dmp

          Filesize

          68KB

        • memory/2148-11-0x000007FEF7B00000-0x000007FEF7B17000-memory.dmp

          Filesize

          92KB

        • memory/2148-13-0x000007FEF7970000-0x000007FEF798D000-memory.dmp

          Filesize

          116KB

        • memory/2148-14-0x000007FEF7950000-0x000007FEF7961000-memory.dmp

          Filesize

          68KB

        • memory/2148-10-0x000007FEF7B20000-0x000007FEF7B31000-memory.dmp

          Filesize

          68KB

        • memory/2148-9-0x000007FEF7BC0000-0x000007FEF7BD7000-memory.dmp

          Filesize

          92KB

        • memory/2148-15-0x000007FEF4E30000-0x000007FEF5EDB000-memory.dmp

          Filesize

          16.7MB

        • memory/2148-16-0x000007FEF4C30000-0x000007FEF4E30000-memory.dmp

          Filesize

          2.0MB

        • memory/2148-17-0x000007FEF6C90000-0x000007FEF6CCF000-memory.dmp

          Filesize

          252KB

        • memory/2148-19-0x000007FEF7650000-0x000007FEF7668000-memory.dmp

          Filesize

          96KB

        • memory/2148-18-0x000007FEF6C60000-0x000007FEF6C81000-memory.dmp

          Filesize

          132KB

        • memory/2148-21-0x000007FEF66E0000-0x000007FEF66F1000-memory.dmp

          Filesize

          68KB

        • memory/2148-20-0x000007FEF6C40000-0x000007FEF6C51000-memory.dmp

          Filesize

          68KB

        • memory/2148-23-0x000007FEF66A0000-0x000007FEF66BB000-memory.dmp

          Filesize

          108KB

        • memory/2148-22-0x000007FEF66C0000-0x000007FEF66D1000-memory.dmp

          Filesize

          68KB

        • memory/2148-24-0x000007FEF6600000-0x000007FEF6611000-memory.dmp

          Filesize

          68KB

        • memory/2148-26-0x000007FEF65B0000-0x000007FEF65E0000-memory.dmp

          Filesize

          192KB

        • memory/2148-25-0x000007FEF65E0000-0x000007FEF65F8000-memory.dmp

          Filesize

          96KB

        • memory/2148-27-0x000007FEF6540000-0x000007FEF65A7000-memory.dmp

          Filesize

          412KB

        • memory/2148-28-0x000007FEF4BC0000-0x000007FEF4C2F000-memory.dmp

          Filesize

          444KB

        • memory/2148-32-0x000007FEF4B20000-0x000007FEF4B77000-memory.dmp

          Filesize

          348KB

        • memory/2148-31-0x000007FEF4B80000-0x000007FEF4B91000-memory.dmp

          Filesize

          68KB

        • memory/2148-30-0x000007FEF4BA0000-0x000007FEF4BB7000-memory.dmp

          Filesize

          92KB

        • memory/2148-29-0x000007FEF6520000-0x000007FEF6531000-memory.dmp

          Filesize

          68KB

        • memory/2148-33-0x000007FEF4AF0000-0x000007FEF4B1F000-memory.dmp

          Filesize

          188KB

        • memory/2148-34-0x000007FEF4AD0000-0x000007FEF4AE3000-memory.dmp

          Filesize

          76KB

        • memory/2148-35-0x000007FEF4AB0000-0x000007FEF4AC1000-memory.dmp

          Filesize

          68KB

        • memory/2148-37-0x000007FEF49C0000-0x000007FEF49D2000-memory.dmp

          Filesize

          72KB

        • memory/2148-36-0x000007FEF49E0000-0x000007FEF4AA5000-memory.dmp

          Filesize

          788KB

        • memory/2148-38-0x000007FEF49A0000-0x000007FEF49B1000-memory.dmp

          Filesize

          68KB

        • memory/2148-39-0x000007FEF4980000-0x000007FEF4994000-memory.dmp

          Filesize

          80KB

        • memory/2148-40-0x000007FEF4960000-0x000007FEF4972000-memory.dmp

          Filesize

          72KB

        • memory/2148-41-0x000007FEF4940000-0x000007FEF4954000-memory.dmp

          Filesize

          80KB

        • memory/2148-42-0x000007FEF4920000-0x000007FEF493E000-memory.dmp

          Filesize

          120KB

        • memory/2148-44-0x000007FEF48E0000-0x000007FEF48F5000-memory.dmp

          Filesize

          84KB

        • memory/2148-46-0x000007FEF4890000-0x000007FEF48BC000-memory.dmp

          Filesize

          176KB

        • memory/2148-48-0x000007FEF4840000-0x000007FEF4870000-memory.dmp

          Filesize

          192KB

        • memory/2148-49-0x000007FEF4820000-0x000007FEF4837000-memory.dmp

          Filesize

          92KB

        • memory/2148-47-0x000007FEF4870000-0x000007FEF4882000-memory.dmp

          Filesize

          72KB

        • memory/2148-45-0x000007FEF48C0000-0x000007FEF48D4000-memory.dmp

          Filesize

          80KB

        • memory/2148-43-0x000007FEF4900000-0x000007FEF4916000-memory.dmp

          Filesize

          88KB

        • memory/2148-50-0x000007FEF3070000-0x000007FEF4820000-memory.dmp

          Filesize

          23.7MB

        • memory/2148-51-0x000007FEF3050000-0x000007FEF3061000-memory.dmp

          Filesize

          68KB

        • memory/2148-52-0x000007FEF3030000-0x000007FEF3042000-memory.dmp

          Filesize

          72KB

        • memory/2148-53-0x000007FEF2EB0000-0x000007FEF3028000-memory.dmp

          Filesize

          1.5MB

        • memory/2148-54-0x000007FEF2E90000-0x000007FEF2EA7000-memory.dmp

          Filesize

          92KB

        • memory/2148-55-0x000007FEF2E30000-0x000007FEF2E86000-memory.dmp

          Filesize

          344KB

        • memory/2148-56-0x000007FEF2E00000-0x000007FEF2E28000-memory.dmp

          Filesize

          160KB

        • memory/2148-58-0x000007FEFB7D0000-0x000007FEFB7E0000-memory.dmp

          Filesize

          64KB

        • memory/2148-59-0x000007FEF2DB0000-0x000007FEF2DC6000-memory.dmp

          Filesize

          88KB

        • memory/2148-60-0x000007FEF2D30000-0x000007FEF2DA5000-memory.dmp

          Filesize

          468KB

        • memory/2148-57-0x000007FEF2DD0000-0x000007FEF2DF4000-memory.dmp

          Filesize

          144KB

        • memory/2148-61-0x000007FEF2CC0000-0x000007FEF2D22000-memory.dmp

          Filesize

          392KB

        • memory/2148-62-0x000007FEF2C50000-0x000007FEF2CBD000-memory.dmp

          Filesize

          436KB

        • memory/2148-63-0x000007FEF2C30000-0x000007FEF2C45000-memory.dmp

          Filesize

          84KB

        • memory/2148-64-0x000007FEF2BF0000-0x000007FEF2C01000-memory.dmp

          Filesize

          68KB

        • memory/2148-65-0x000007FEF2BD0000-0x000007FEF2BE2000-memory.dmp

          Filesize

          72KB

        • memory/2148-66-0x000007FEF2A50000-0x000007FEF2BCA000-memory.dmp

          Filesize

          1.5MB