Analysis

  • max time kernel
    141s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    02/09/2023, 16:31

General

  • Target

    y2mate.com - Gojo Geto 五條 Oを取得 AmvEdit_1080pFHR.mp4

  • Size

    25.5MB

  • MD5

    bd37dd5f0a6d471cbb405fcd37ee02b7

  • SHA1

    72d5ed80b76b241e7df3d07e1725210947b261d6

  • SHA256

    441b726bae004e4dfaf1d803a596e15d1d2d8b0dc3651b545821933d34e0a6af

  • SHA512

    90c6349df5cd62b047bbfb5cac76f850ce68e9bb158bff206f39acc13469d2f13b85cea215bf838430ddf9ba4ae50275fe016c48f3780bcb6c2423476fbb187d

  • SSDEEP

    786432:I5n/hzwVThI1W6G4OMJ/piz1xAb473s+TNUSF+Qj:OpiTACMJxiz0b4VNUSoQj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 28 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\y2mate.com - Gojo Geto 五條 Oを取得 AmvEdit_1080pFHR.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2216-5-0x000000013F0C0000-0x000000013F1B8000-memory.dmp

    Filesize

    992KB

  • memory/2216-6-0x000007FEF7610000-0x000007FEF7644000-memory.dmp

    Filesize

    208KB

  • memory/2216-7-0x000007FEF58F0000-0x000007FEF5BA4000-memory.dmp

    Filesize

    2.7MB

  • memory/2216-8-0x000007FEFB830000-0x000007FEFB848000-memory.dmp

    Filesize

    96KB

  • memory/2216-9-0x000007FEF7660000-0x000007FEF7677000-memory.dmp

    Filesize

    92KB

  • memory/2216-10-0x000007FEF7450000-0x000007FEF7461000-memory.dmp

    Filesize

    68KB

  • memory/2216-11-0x000007FEF7430000-0x000007FEF7447000-memory.dmp

    Filesize

    92KB

  • memory/2216-12-0x000007FEF6D60000-0x000007FEF6D71000-memory.dmp

    Filesize

    68KB

  • memory/2216-13-0x000007FEF6730000-0x000007FEF674D000-memory.dmp

    Filesize

    116KB

  • memory/2216-14-0x000007FEF6710000-0x000007FEF6721000-memory.dmp

    Filesize

    68KB

  • memory/2216-15-0x000007FEF4840000-0x000007FEF58EB000-memory.dmp

    Filesize

    16.7MB

  • memory/2216-16-0x000007FEF4640000-0x000007FEF4840000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-18-0x000007FEF66E0000-0x000007FEF6701000-memory.dmp

    Filesize

    132KB

  • memory/2216-21-0x000007FEF5FB0000-0x000007FEF5FC1000-memory.dmp

    Filesize

    68KB

  • memory/2216-24-0x000007FEF5F50000-0x000007FEF5F61000-memory.dmp

    Filesize

    68KB

  • memory/2216-26-0x000007FEF4610000-0x000007FEF4640000-memory.dmp

    Filesize

    192KB

  • memory/2216-27-0x000007FEF45A0000-0x000007FEF4607000-memory.dmp

    Filesize

    412KB

  • memory/2216-25-0x000007FEF5F30000-0x000007FEF5F48000-memory.dmp

    Filesize

    96KB

  • memory/2216-28-0x000007FEF4530000-0x000007FEF459F000-memory.dmp

    Filesize

    444KB

  • memory/2216-30-0x000007FEF44B0000-0x000007FEF4506000-memory.dmp

    Filesize

    344KB

  • memory/2216-29-0x000007FEF4510000-0x000007FEF4521000-memory.dmp

    Filesize

    68KB

  • memory/2216-23-0x000007FEF5F70000-0x000007FEF5F8B000-memory.dmp

    Filesize

    108KB

  • memory/2216-22-0x000007FEF5F90000-0x000007FEF5FA1000-memory.dmp

    Filesize

    68KB

  • memory/2216-20-0x000007FEF5FD0000-0x000007FEF5FE1000-memory.dmp

    Filesize

    68KB

  • memory/2216-19-0x000007FEF60A0000-0x000007FEF60B8000-memory.dmp

    Filesize

    96KB

  • memory/2216-31-0x000007FEF4330000-0x000007FEF44A8000-memory.dmp

    Filesize

    1.5MB

  • memory/2216-32-0x000007FEF4310000-0x000007FEF4327000-memory.dmp

    Filesize

    92KB

  • memory/2216-17-0x000007FEF5FF0000-0x000007FEF602F000-memory.dmp

    Filesize

    252KB

  • memory/2216-33-0x000007FEF41A0000-0x000007FEF4310000-memory.dmp

    Filesize

    1.4MB

  • memory/2216-34-0x000007FEF4180000-0x000007FEF4192000-memory.dmp

    Filesize

    72KB

  • memory/2216-35-0x000007FEF4130000-0x000007FEF4172000-memory.dmp

    Filesize

    264KB

  • memory/2216-36-0x000007FEF40E0000-0x000007FEF412C000-memory.dmp

    Filesize

    304KB

  • memory/2216-37-0x000007FEF3F70000-0x000007FEF40DB000-memory.dmp

    Filesize

    1.4MB

  • memory/2216-38-0x000007FEF3F10000-0x000007FEF3F67000-memory.dmp

    Filesize

    348KB

  • memory/2216-39-0x000007FEF3CC0000-0x000007FEF3F0B000-memory.dmp

    Filesize

    2.3MB

  • memory/2216-41-0x000007FEFB480000-0x000007FEFB490000-memory.dmp

    Filesize

    64KB

  • memory/2216-42-0x000007FEF24E0000-0x000007FEF250F000-memory.dmp

    Filesize

    188KB

  • memory/2216-44-0x000007FEF24A0000-0x000007FEF24B6000-memory.dmp

    Filesize

    88KB

  • memory/2216-43-0x000007FEF24C0000-0x000007FEF24D1000-memory.dmp

    Filesize

    68KB

  • memory/2216-45-0x000007FEF23D0000-0x000007FEF2495000-memory.dmp

    Filesize

    788KB

  • memory/2216-40-0x000007FEF2510000-0x000007FEF3CC0000-memory.dmp

    Filesize

    23.7MB

  • memory/2216-46-0x000007FEF2350000-0x000007FEF23C5000-memory.dmp

    Filesize

    468KB

  • memory/2216-47-0x000007FEF22E0000-0x000007FEF2342000-memory.dmp

    Filesize

    392KB

  • memory/2216-49-0x000007FEF2250000-0x000007FEF2263000-memory.dmp

    Filesize

    76KB

  • memory/2216-50-0x000007FEF2230000-0x000007FEF2244000-memory.dmp

    Filesize

    80KB

  • memory/2216-48-0x000007FEF2270000-0x000007FEF22DD000-memory.dmp

    Filesize

    436KB

  • memory/2216-51-0x000007FEF21E0000-0x000007FEF2230000-memory.dmp

    Filesize

    320KB

  • memory/2216-52-0x000007FEF21C0000-0x000007FEF21D5000-memory.dmp

    Filesize

    84KB

  • memory/2216-53-0x000007FEF1F80000-0x000007FEF219D000-memory.dmp

    Filesize

    2.1MB

  • memory/2216-54-0x000007FEF1F60000-0x000007FEF1F71000-memory.dmp

    Filesize

    68KB

  • memory/2216-55-0x000007FEF1F40000-0x000007FEF1F52000-memory.dmp

    Filesize

    72KB

  • memory/2216-56-0x000007FEF1C20000-0x000007FEF1D9A000-memory.dmp

    Filesize

    1.5MB

  • memory/2216-59-0x000007FEF1ED0000-0x000007FEF1EE3000-memory.dmp

    Filesize

    76KB

  • memory/2216-58-0x000007FEF1EF0000-0x000007FEF1F13000-memory.dmp

    Filesize

    140KB

  • memory/2216-57-0x000007FEF1F20000-0x000007FEF1F35000-memory.dmp

    Filesize

    84KB

  • memory/2216-60-0x000007FEF1DD0000-0x000007FEF1EC4000-memory.dmp

    Filesize

    976KB

  • memory/2216-61-0x000007FEF1DA0000-0x000007FEF1DCA000-memory.dmp

    Filesize

    168KB

  • memory/2216-62-0x000007FEF1C00000-0x000007FEF1C13000-memory.dmp

    Filesize

    76KB

  • memory/2216-63-0x000007FEF1BE0000-0x000007FEF1BFB000-memory.dmp

    Filesize

    108KB

  • memory/2216-64-0x000007FEF1BC0000-0x000007FEF1BD2000-memory.dmp

    Filesize

    72KB

  • memory/2216-65-0x000007FEF1BA0000-0x000007FEF1BB5000-memory.dmp

    Filesize

    84KB

  • memory/2216-66-0x000007FEF1B80000-0x000007FEF1B93000-memory.dmp

    Filesize

    76KB

  • memory/2216-67-0x000007FEF1B60000-0x000007FEF1B74000-memory.dmp

    Filesize

    80KB

  • memory/2216-68-0x000007FEF1B40000-0x000007FEF1B52000-memory.dmp

    Filesize

    72KB