44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

Analysis

max time kernel
141s
max time network
126s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
24-09-2023 14:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

X2Download.app - Reise, Reise (320 kbps).mp3
Size

2B
MD5

99914b932bd37a50b983c5e7c90ae93b
SHA1

bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256

44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512

27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2564	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2564	vlc.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2564	vlc.exe
2564	vlc.exe
2564	vlc.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
2564	vlc.exe
2564	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2564	vlc.exe

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\X2Download.app - Reise, Reise (320 kbps).mp3"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2564-0-0x000000013F660000-0x000000013F758000-memory.dmp

Filesize
992KB

Download
memory/2564-1-0x000007FEFAC80000-0x000007FEFACB4000-memory.dmp

Filesize
208KB

Download
memory/2564-2-0x000007FEF5E00000-0x000007FEF60B4000-memory.dmp

Filesize
2.7MB

Download
memory/2564-3-0x000007FEFB510000-0x000007FEFB528000-memory.dmp

Filesize
96KB

Download
memory/2564-4-0x000007FEFAF60000-0x000007FEFAF77000-memory.dmp

Filesize
92KB

Download
memory/2564-5-0x000007FEFAEC0000-0x000007FEFAED1000-memory.dmp

Filesize
68KB

Download
memory/2564-6-0x000007FEF7650000-0x000007FEF7667000-memory.dmp

Filesize
92KB

Download
memory/2564-7-0x000007FEF75C0000-0x000007FEF75D1000-memory.dmp

Filesize
68KB

Download
memory/2564-8-0x000007FEF75A0000-0x000007FEF75BD000-memory.dmp

Filesize
116KB

Download
memory/2564-9-0x000007FEF5C00000-0x000007FEF5E00000-memory.dmp

Filesize
2.0MB

Download
memory/2564-10-0x000007FEF7580000-0x000007FEF7591000-memory.dmp

Filesize
68KB

Download
memory/2564-11-0x000007FEF7540000-0x000007FEF757F000-memory.dmp

Filesize
252KB

Download
memory/2564-12-0x000007FEF4B50000-0x000007FEF5BFB000-memory.dmp

Filesize
16.7MB

Download
memory/2564-13-0x000007FEF7330000-0x000007FEF7351000-memory.dmp

Filesize
132KB

Download
memory/2564-14-0x000007FEF7310000-0x000007FEF7328000-memory.dmp

Filesize
96KB

Download
memory/2564-15-0x000007FEF72F0000-0x000007FEF7301000-memory.dmp

Filesize
68KB

Download
memory/2564-16-0x000007FEF72D0000-0x000007FEF72E1000-memory.dmp

Filesize
68KB

Download
memory/2564-17-0x000007FEF6B40000-0x000007FEF6B51000-memory.dmp

Filesize
68KB

Download
memory/2564-18-0x000007FEF6960000-0x000007FEF697B000-memory.dmp

Filesize
108KB

Download
memory/2564-19-0x000007FEF6940000-0x000007FEF6951000-memory.dmp

Filesize
68KB

Download
memory/2564-20-0x000007FEF6920000-0x000007FEF6938000-memory.dmp

Filesize
96KB

Download
memory/2564-21-0x000007FEF6510000-0x000007FEF6540000-memory.dmp

Filesize
192KB

Download
memory/2564-22-0x000007FEF64A0000-0x000007FEF6507000-memory.dmp

Filesize
412KB

Download
memory/2564-23-0x000007FEF6430000-0x000007FEF649F000-memory.dmp

Filesize
444KB

Download
memory/2564-24-0x000007FEF4B30000-0x000007FEF4B41000-memory.dmp

Filesize
68KB

Download
memory/2564-25-0x000007FEF4B10000-0x000007FEF4B27000-memory.dmp

Filesize
92KB

Download
memory/2564-26-0x000007FEF4AB0000-0x000007FEF4B06000-memory.dmp

Filesize
344KB

Download
memory/2564-27-0x000007FEF4A80000-0x000007FEF4AA8000-memory.dmp

Filesize
160KB

Download
memory/2564-28-0x000007FEF4A50000-0x000007FEF4A74000-memory.dmp

Filesize
144KB

Download
memory/2564-29-0x000007FEF4A20000-0x000007FEF4A43000-memory.dmp

Filesize
140KB

Download
memory/2564-30-0x000007FEF4A00000-0x000007FEF4A11000-memory.dmp

Filesize
68KB

Download
memory/2564-31-0x000007FEF49E0000-0x000007FEF49F2000-memory.dmp

Filesize
72KB

Download
memory/2564-32-0x000007FEF49B0000-0x000007FEF49D1000-memory.dmp

Filesize
132KB

Download
memory/2564-33-0x000007FEF4990000-0x000007FEF49A3000-memory.dmp

Filesize
76KB

Download
memory/2564-34-0x000007FEF4970000-0x000007FEF4982000-memory.dmp

Filesize
72KB

Download
memory/2564-35-0x000007FEF4830000-0x000007FEF496B000-memory.dmp

Filesize
1.2MB

Download
memory/2564-36-0x000007FEF4800000-0x000007FEF482C000-memory.dmp

Filesize
176KB

Download
memory/2564-37-0x000007FEF4640000-0x000007FEF47F2000-memory.dmp

Filesize
1.7MB

Download
memory/2564-38-0x000007FEF45E0000-0x000007FEF463C000-memory.dmp

Filesize
368KB

Download
memory/2564-39-0x000007FEF45C0000-0x000007FEF45D1000-memory.dmp

Filesize
68KB

Download
memory/2564-40-0x000007FEF4520000-0x000007FEF45B7000-memory.dmp

Filesize
604KB

Download
memory/2564-41-0x000007FEF4500000-0x000007FEF4512000-memory.dmp

Filesize
72KB

Download
memory/2564-42-0x000007FEF42C0000-0x000007FEF44F1000-memory.dmp

Filesize
2.2MB

Download
memory/2564-43-0x000007FEF41A0000-0x000007FEF42B2000-memory.dmp

Filesize
1.1MB

Download
memory/2564-44-0x000007FEF4160000-0x000007FEF4195000-memory.dmp

Filesize
212KB

Download
memory/2564-45-0x000007FEF4130000-0x000007FEF4155000-memory.dmp

Filesize
148KB

Download
memory/2564-46-0x000007FEF4110000-0x000007FEF4121000-memory.dmp

Filesize
68KB

Download
memory/2564-47-0x000007FEF40A0000-0x000007FEF4101000-memory.dmp

Filesize
388KB

Download
memory/2564-48-0x000007FEF4080000-0x000007FEF4091000-memory.dmp

Filesize
68KB

Download
memory/2564-49-0x000007FEF4060000-0x000007FEF4072000-memory.dmp

Filesize
72KB

Download
memory/2564-50-0x000007FEF4040000-0x000007FEF4053000-memory.dmp

Filesize
76KB

Download
memory/2564-51-0x000007FEF3FA0000-0x000007FEF403F000-memory.dmp

Filesize
636KB

Download
memory/2564-52-0x000007FEF3F80000-0x000007FEF3F91000-memory.dmp

Filesize
68KB

Download
memory/2564-53-0x000007FEF3E70000-0x000007FEF3F72000-memory.dmp

Filesize
1.0MB

Download
memory/2564-54-0x000007FEF3E50000-0x000007FEF3E61000-memory.dmp

Filesize
68KB

Download
memory/2564-55-0x000007FEF3E30000-0x000007FEF3E41000-memory.dmp

Filesize
68KB

Download
memory/2564-56-0x000007FEF3E10000-0x000007FEF3E21000-memory.dmp

Filesize
68KB

Download
memory/2564-57-0x000007FEF3DF0000-0x000007FEF3E02000-memory.dmp

Filesize
72KB

Download
memory/2564-58-0x000007FEF3DD0000-0x000007FEF3DE8000-memory.dmp

Filesize
96KB

Download
memory/2564-59-0x000007FEF3DB0000-0x000007FEF3DC6000-memory.dmp

Filesize
88KB

Download
memory/2564-60-0x000007FEF3D80000-0x000007FEF3DA9000-memory.dmp

Filesize
164KB

Download
memory/2564-61-0x000007FEF3D60000-0x000007FEF3D72000-memory.dmp

Filesize
72KB

Download
memory/2564-62-0x000007FEF3D40000-0x000007FEF3D51000-memory.dmp

Filesize
68KB

Download
memory/2564-63-0x000007FEF3D20000-0x000007FEF3D31000-memory.dmp

Filesize
68KB

Download