282b2bba57bb185fb81d4f401425efa9b6a6f99111640d99521b86b088f9aab9

Analysis

max time kernel
165s
max time network
143s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
21/09/2023, 20:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

DF CONNECTED v2.7.6c (Windows)/mus_encore_ost.ogg
Size

1.5MB
MD5

7c20d8e3ad7613cd8b58748008e02f57
SHA1

63b448dd1f03230f2cc5ca92f72d925dc7fa9068
SHA256

a951d8ea3a02ef8451a7eaa805e00e9f18d335732794a1bb423d698f5add5e00
SHA512

41e529ccf9ec09435b0c73b1dea333c1d45a9dc10f75dc71ed1b2afb2d06b8a2823de66464815a862267aa02f0466fd1e91ddaadb3f2c3d99d8c20eb29b10756
SSDEEP

49152:GtLfyvMbcCdqpyn2UDYFaUgw6Yc74SkxM:GVykfdiyHYFaUrLcEfa

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
1936	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1936	vlc.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	1936	vlc.exe
Token: SeIncBasePriorityPrivilege	1936	vlc.exe

Suspicious use of FindShellTrayWindow 8 IoCs

pid	Process
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe

Suspicious use of SendNotifyMessage 7 IoCs

pid	Process
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1936	vlc.exe

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\DF CONNECTED v2.7.6c (Windows)\mus_encore_ost.ogg"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1936-5-0x000000013F120000-0x000000013F218000-memory.dmp

Filesize
992KB

Download
memory/1936-6-0x000007FEFAFF0000-0x000007FEFB024000-memory.dmp

Filesize
208KB

Download
memory/1936-7-0x000007FEF62D0000-0x000007FEF6584000-memory.dmp

Filesize
2.7MB

Download
memory/1936-8-0x000007FEFBD90000-0x000007FEFBDA8000-memory.dmp

Filesize
96KB

Download
memory/1936-9-0x000007FEFAFD0000-0x000007FEFAFE7000-memory.dmp

Filesize
92KB

Download
memory/1936-11-0x000007FEF7D50000-0x000007FEF7D67000-memory.dmp

Filesize
92KB

Download
memory/1936-12-0x000007FEF7B50000-0x000007FEF7B61000-memory.dmp

Filesize
68KB

Download
memory/1936-14-0x000007FEF7A90000-0x000007FEF7AA1000-memory.dmp

Filesize
68KB

Download
memory/1936-13-0x000007FEF7B30000-0x000007FEF7B4D000-memory.dmp

Filesize
116KB

Download
memory/1936-10-0x000007FEFAFB0000-0x000007FEFAFC1000-memory.dmp

Filesize
68KB

Download
memory/1936-15-0x000007FEF60D0000-0x000007FEF62D0000-memory.dmp

Filesize
2.0MB

Download
memory/1936-16-0x000007FEF7530000-0x000007FEF756F000-memory.dmp

Filesize
252KB

Download
memory/1936-19-0x000007FEF7A70000-0x000007FEF7A88000-memory.dmp

Filesize
96KB

Download
memory/1936-20-0x000007FEF74E0000-0x000007FEF74F1000-memory.dmp

Filesize
68KB

Download
memory/1936-22-0x000007FEF6F30000-0x000007FEF6F41000-memory.dmp

Filesize
68KB

Download
memory/1936-23-0x000007FEF6F10000-0x000007FEF6F2B000-memory.dmp

Filesize
108KB

Download
memory/1936-25-0x000007FEF6AA0000-0x000007FEF6AB8000-memory.dmp

Filesize
96KB

Download
memory/1936-26-0x000007FEF6A70000-0x000007FEF6AA0000-memory.dmp

Filesize
192KB

Download
memory/1936-24-0x000007FEF6EF0000-0x000007FEF6F01000-memory.dmp

Filesize
68KB

Download
memory/1936-27-0x000007FEF69A0000-0x000007FEF6A07000-memory.dmp

Filesize
412KB

Download
memory/1936-21-0x000007FEF6F50000-0x000007FEF6F61000-memory.dmp

Filesize
68KB

Download
memory/1936-18-0x000007FEF7500000-0x000007FEF7521000-memory.dmp

Filesize
132KB

Download
memory/1936-28-0x000007FEF6930000-0x000007FEF699F000-memory.dmp

Filesize
444KB

Download
memory/1936-29-0x000007FEF6A50000-0x000007FEF6A61000-memory.dmp

Filesize
68KB

Download
memory/1936-30-0x000007FEF4FC0000-0x000007FEF501C000-memory.dmp

Filesize
368KB

Download
memory/1936-17-0x000007FEF5020000-0x000007FEF60CB000-memory.dmp

Filesize
16.7MB

Download
memory/1936-31-0x000007FEF4E40000-0x000007FEF4FB8000-memory.dmp

Filesize
1.5MB

Download
memory/1936-32-0x000007FEF6910000-0x000007FEF6927000-memory.dmp

Filesize
92KB

Download
memory/1936-33-0x000007FEFB3A0000-0x000007FEFB3B0000-memory.dmp

Filesize
64KB

Download
memory/1936-34-0x000007FEF4E10000-0x000007FEF4E3F000-memory.dmp

Filesize
188KB

Download
memory/1936-35-0x000007FEF4DF0000-0x000007FEF4E01000-memory.dmp

Filesize
68KB

Download
memory/1936-36-0x000007FEF4DD0000-0x000007FEF4DE6000-memory.dmp

Filesize
88KB

Download
memory/1936-37-0x000007FEF4D00000-0x000007FEF4DC5000-memory.dmp

Filesize
788KB

Download
memory/1936-38-0x000007FEF4CE0000-0x000007FEF4CF5000-memory.dmp

Filesize
84KB

Download
memory/1936-40-0x000007FEF4C80000-0x000007FEF4C92000-memory.dmp

Filesize
72KB

Download
memory/1936-39-0x000007FEF4CA0000-0x000007FEF4CB1000-memory.dmp

Filesize
68KB

Download
memory/1936-41-0x000007FEF4B00000-0x000007FEF4C7A000-memory.dmp

Filesize
1.5MB

Download