Analysis
-
max time kernel
1772s -
max time network
1579s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
29-09-2023 21:59
Static task
static1
Behavioral task
behavioral1
Sample
456.webm
Resource
win7-20230831-en
windows7-x64
6 signatures
1800 seconds
Behavioral task
behavioral2
Sample
456.webm
Resource
win10v2004-20230915-en
windows10-2004-x64
10 signatures
1800 seconds
General
-
Target
456.webm
-
Size
259KB
-
MD5
8a8d836187855800b916b57b5d3a794e
-
SHA1
068b0be480653030554f070b4dda0c74bff7559b
-
SHA256
5bf77c5546c8ece3685e5557ce590f7d28461588f15aeb8e5b2160d48c3c403b
-
SHA512
1103a69dd8ffddea197776f91243ea0131b58a9954b1766f5492246074843fc041dd5b60afcbdd0babb56dc47ae0343ae371390f27d2272365def588314f90c9
-
SSDEEP
6144:Tu9KqGUwFutqFsrpbQbkcAC7KXFeUclCqC28PmxO17vMjCoEa1oxU6OG2btkW0:SUfFutxr1QbuJXFLclCqb89v1D5UznR0
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2152 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2152 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2152 vlc.exe Token: SeIncBasePriorityPrivilege 2152 vlc.exe -
Suspicious use of FindShellTrayWindow 17 IoCs
pid Process 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe -
Suspicious use of SendNotifyMessage 9 IoCs
pid Process 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe 2152 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2152 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\456.webm"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2152