Analysis

  • max time kernel
    1772s
  • max time network
    1579s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    29-09-2023 21:59

General

  • Target

    456.webm

  • Size

    259KB

  • MD5

    8a8d836187855800b916b57b5d3a794e

  • SHA1

    068b0be480653030554f070b4dda0c74bff7559b

  • SHA256

    5bf77c5546c8ece3685e5557ce590f7d28461588f15aeb8e5b2160d48c3c403b

  • SHA512

    1103a69dd8ffddea197776f91243ea0131b58a9954b1766f5492246074843fc041dd5b60afcbdd0babb56dc47ae0343ae371390f27d2272365def588314f90c9

  • SSDEEP

    6144:Tu9KqGUwFutqFsrpbQbkcAC7KXFeUclCqC28PmxO17vMjCoEa1oxU6OG2btkW0:SUfFutxr1QbuJXFLclCqb89v1D5UznR0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 17 IoCs
  • Suspicious use of SendNotifyMessage 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\456.webm"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2152-6-0x000007FEFA2D0000-0x000007FEFA304000-memory.dmp

    Filesize

    208KB

  • memory/2152-5-0x000000013FE90000-0x000000013FF88000-memory.dmp

    Filesize

    992KB

  • memory/2152-7-0x000007FEF5870000-0x000007FEF5B24000-memory.dmp

    Filesize

    2.7MB

  • memory/2152-8-0x000007FEFAE60000-0x000007FEFAE78000-memory.dmp

    Filesize

    96KB

  • memory/2152-9-0x000007FEFA8D0000-0x000007FEFA8E7000-memory.dmp

    Filesize

    92KB

  • memory/2152-11-0x000007FEF71D0000-0x000007FEF71E7000-memory.dmp

    Filesize

    92KB

  • memory/2152-12-0x000007FEF70C0000-0x000007FEF70D1000-memory.dmp

    Filesize

    68KB

  • memory/2152-14-0x000007FEF7080000-0x000007FEF7091000-memory.dmp

    Filesize

    68KB

  • memory/2152-13-0x000007FEF70A0000-0x000007FEF70BD000-memory.dmp

    Filesize

    116KB

  • memory/2152-10-0x000007FEFA280000-0x000007FEFA291000-memory.dmp

    Filesize

    68KB

  • memory/2152-15-0x000007FEF5670000-0x000007FEF5870000-memory.dmp

    Filesize

    2.0MB

  • memory/2152-16-0x000007FEF6FC0000-0x000007FEF6FFF000-memory.dmp

    Filesize

    252KB

  • memory/2152-17-0x000007FEF45C0000-0x000007FEF566B000-memory.dmp

    Filesize

    16.7MB

  • memory/2152-18-0x000007FEF6F90000-0x000007FEF6FB1000-memory.dmp

    Filesize

    132KB

  • memory/2152-19-0x000007FEF6460000-0x000007FEF6478000-memory.dmp

    Filesize

    96KB

  • memory/2152-21-0x000007FEF6420000-0x000007FEF6431000-memory.dmp

    Filesize

    68KB

  • memory/2152-22-0x000007FEF6400000-0x000007FEF6411000-memory.dmp

    Filesize

    68KB

  • memory/2152-24-0x000007FEF5F90000-0x000007FEF5FA1000-memory.dmp

    Filesize

    68KB

  • memory/2152-23-0x000007FEF5FB0000-0x000007FEF5FCB000-memory.dmp

    Filesize

    108KB

  • memory/2152-26-0x000007FEF5F40000-0x000007FEF5F70000-memory.dmp

    Filesize

    192KB

  • memory/2152-27-0x000007FEF5ED0000-0x000007FEF5F37000-memory.dmp

    Filesize

    412KB

  • memory/2152-25-0x000007FEF5F70000-0x000007FEF5F88000-memory.dmp

    Filesize

    96KB

  • memory/2152-28-0x000007FEF4550000-0x000007FEF45BF000-memory.dmp

    Filesize

    444KB

  • memory/2152-20-0x000007FEF6440000-0x000007FEF6451000-memory.dmp

    Filesize

    68KB

  • memory/2152-29-0x000007FEF5EB0000-0x000007FEF5EC1000-memory.dmp

    Filesize

    68KB

  • memory/2152-30-0x000007FEF44F0000-0x000007FEF4546000-memory.dmp

    Filesize

    344KB

  • memory/2152-32-0x000007FEF4490000-0x000007FEF44B4000-memory.dmp

    Filesize

    144KB

  • memory/2152-31-0x000007FEF44C0000-0x000007FEF44E8000-memory.dmp

    Filesize

    160KB

  • memory/2152-33-0x000007FEF4470000-0x000007FEF4487000-memory.dmp

    Filesize

    92KB

  • memory/2152-34-0x000007FEF4440000-0x000007FEF4463000-memory.dmp

    Filesize

    140KB

  • memory/2152-36-0x000007FEF4400000-0x000007FEF4412000-memory.dmp

    Filesize

    72KB

  • memory/2152-35-0x000007FEF4420000-0x000007FEF4431000-memory.dmp

    Filesize

    68KB

  • memory/2152-39-0x000007FEF4390000-0x000007FEF43A2000-memory.dmp

    Filesize

    72KB

  • memory/2152-38-0x000007FEF43B0000-0x000007FEF43C3000-memory.dmp

    Filesize

    76KB

  • memory/2152-37-0x000007FEF43D0000-0x000007FEF43F1000-memory.dmp

    Filesize

    132KB

  • memory/2152-40-0x000007FEF4250000-0x000007FEF438B000-memory.dmp

    Filesize

    1.2MB

  • memory/2152-41-0x000007FEF4220000-0x000007FEF424C000-memory.dmp

    Filesize

    176KB

  • memory/2152-42-0x000007FEF4060000-0x000007FEF4212000-memory.dmp

    Filesize

    1.7MB

  • memory/2152-43-0x000007FEF3EE0000-0x000007FEF4058000-memory.dmp

    Filesize

    1.5MB

  • memory/2152-44-0x000007FEF3EC0000-0x000007FEF3ED7000-memory.dmp

    Filesize

    92KB

  • memory/2152-49-0x000007FEF3DD0000-0x000007FEF3DE1000-memory.dmp

    Filesize

    68KB

  • memory/2152-50-0x000007FEF3D00000-0x000007FEF3DC5000-memory.dmp

    Filesize

    788KB

  • memory/2152-48-0x000007FEF3DF0000-0x000007FEF3E03000-memory.dmp

    Filesize

    76KB

  • memory/2152-47-0x000007FEF3E10000-0x000007FEF3E3F000-memory.dmp

    Filesize

    188KB

  • memory/2152-51-0x000007FEF3CE0000-0x000007FEF3CF2000-memory.dmp

    Filesize

    72KB

  • memory/2152-46-0x000007FEF3E40000-0x000007FEF3E97000-memory.dmp

    Filesize

    348KB

  • memory/2152-52-0x000007FEF3CC0000-0x000007FEF3CD1000-memory.dmp

    Filesize

    68KB

  • memory/2152-45-0x000007FEF3EA0000-0x000007FEF3EB1000-memory.dmp

    Filesize

    68KB

  • memory/2152-53-0x000007FEF3CA0000-0x000007FEF3CB4000-memory.dmp

    Filesize

    80KB

  • memory/2152-55-0x000007FEF3C60000-0x000007FEF3C74000-memory.dmp

    Filesize

    80KB

  • memory/2152-54-0x000007FEF3C80000-0x000007FEF3C92000-memory.dmp

    Filesize

    72KB

  • memory/2152-56-0x000007FEF3C40000-0x000007FEF3C5E000-memory.dmp

    Filesize

    120KB

  • memory/2152-58-0x000007FEF3C00000-0x000007FEF3C15000-memory.dmp

    Filesize

    84KB

  • memory/2152-59-0x000007FEF3BE0000-0x000007FEF3BF4000-memory.dmp

    Filesize

    80KB

  • memory/2152-60-0x000007FEF3BB0000-0x000007FEF3BDC000-memory.dmp

    Filesize

    176KB

  • memory/2152-61-0x000007FEF3B90000-0x000007FEF3BA2000-memory.dmp

    Filesize

    72KB

  • memory/2152-62-0x000007FEF3B60000-0x000007FEF3B90000-memory.dmp

    Filesize

    192KB

  • memory/2152-57-0x000007FEF3C20000-0x000007FEF3C36000-memory.dmp

    Filesize

    88KB

  • memory/2152-63-0x000007FEF3B40000-0x000007FEF3B57000-memory.dmp

    Filesize

    92KB

  • memory/2152-64-0x000007FEF2390000-0x000007FEF3B40000-memory.dmp

    Filesize

    23.7MB

  • memory/2152-65-0x000007FEF2220000-0x000007FEF2390000-memory.dmp

    Filesize

    1.4MB

  • memory/2152-67-0x000007FEF21B0000-0x000007FEF21F2000-memory.dmp

    Filesize

    264KB

  • memory/2152-66-0x000007FEF2200000-0x000007FEF2212000-memory.dmp

    Filesize

    72KB

  • memory/2152-68-0x000007FEF2160000-0x000007FEF21AC000-memory.dmp

    Filesize

    304KB