Resubmissions

03/10/2023, 14:56

231003-sbdm7scb8z 7

03/10/2023, 14:35

231003-rx4abadf82 7

02/10/2023, 22:39

231002-2k417afa8s 7

02/10/2023, 21:20

231002-z68v6aeg3z 7

Analysis

  • max time kernel
    141s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2023, 22:39

General

  • Target

    invaderexplode.ogg

  • Size

    55KB

  • MD5

    537c9151405a39433ec115b8c794b1c2

  • SHA1

    911360abe13ca8e6292e9faa5932b362f3d01589

  • SHA256

    cee092248f0b79f0b6e854451d54fe73d23b2d250ed7e2dd3ca7d3aabe7231cf

  • SHA512

    4f38045acf6ecbb534d088f44ff2d6f319056225c747bbe8919da618b0d59fe01a86f1c53494d01c97849aa5f18781b2ccffd3d23c4ca014d9905e84125942bb

  • SSDEEP

    1536:7loX67Qpwx3e7Wn02DaM/89xUrb8HcUND:7l4cQ2he7emM/8UrIcm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\invaderexplode.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1944-5-0x000000013F680000-0x000000013F778000-memory.dmp

    Filesize

    992KB

  • memory/1944-6-0x000007FEF72B0000-0x000007FEF72E4000-memory.dmp

    Filesize

    208KB

  • memory/1944-7-0x000007FEF5AD0000-0x000007FEF5D84000-memory.dmp

    Filesize

    2.7MB

  • memory/1944-8-0x000007FEFB5D0000-0x000007FEFB5E8000-memory.dmp

    Filesize

    96KB

  • memory/1944-9-0x000007FEFAC00000-0x000007FEFAC17000-memory.dmp

    Filesize

    92KB

  • memory/1944-10-0x000007FEF7320000-0x000007FEF7331000-memory.dmp

    Filesize

    68KB

  • memory/1944-11-0x000007FEF7270000-0x000007FEF7287000-memory.dmp

    Filesize

    92KB

  • memory/1944-12-0x000007FEF6D50000-0x000007FEF6D61000-memory.dmp

    Filesize

    68KB

  • memory/1944-13-0x000007FEF6D30000-0x000007FEF6D4D000-memory.dmp

    Filesize

    116KB

  • memory/1944-14-0x000007FEF6D10000-0x000007FEF6D21000-memory.dmp

    Filesize

    68KB

  • memory/1944-15-0x000007FEF58D0000-0x000007FEF5AD0000-memory.dmp

    Filesize

    2.0MB

  • memory/1944-16-0x000007FEF6CD0000-0x000007FEF6D0F000-memory.dmp

    Filesize

    252KB

  • memory/1944-17-0x000007FEF4820000-0x000007FEF58CB000-memory.dmp

    Filesize

    16.7MB

  • memory/1944-18-0x000007FEF6740000-0x000007FEF6761000-memory.dmp

    Filesize

    132KB

  • memory/1944-19-0x000007FEF6720000-0x000007FEF6738000-memory.dmp

    Filesize

    96KB

  • memory/1944-20-0x000007FEF6700000-0x000007FEF6711000-memory.dmp

    Filesize

    68KB

  • memory/1944-21-0x000007FEF66E0000-0x000007FEF66F1000-memory.dmp

    Filesize

    68KB

  • memory/1944-22-0x000007FEF61F0000-0x000007FEF6201000-memory.dmp

    Filesize

    68KB

  • memory/1944-23-0x000007FEF61D0000-0x000007FEF61EB000-memory.dmp

    Filesize

    108KB

  • memory/1944-24-0x000007FEF61B0000-0x000007FEF61C1000-memory.dmp

    Filesize

    68KB

  • memory/1944-25-0x000007FEF6190000-0x000007FEF61A8000-memory.dmp

    Filesize

    96KB

  • memory/1944-26-0x000007FEF6160000-0x000007FEF6190000-memory.dmp

    Filesize

    192KB

  • memory/1944-27-0x000007FEF47B0000-0x000007FEF4817000-memory.dmp

    Filesize

    412KB

  • memory/1944-28-0x000007FEF4740000-0x000007FEF47AF000-memory.dmp

    Filesize

    444KB

  • memory/1944-29-0x000007FEF6140000-0x000007FEF6151000-memory.dmp

    Filesize

    68KB

  • memory/1944-30-0x000007FEF46E0000-0x000007FEF473C000-memory.dmp

    Filesize

    368KB

  • memory/1944-31-0x000007FEF4680000-0x000007FEF46D6000-memory.dmp

    Filesize

    344KB

  • memory/1944-36-0x000007FEF45E0000-0x000007FEF45F1000-memory.dmp

    Filesize

    68KB

  • memory/1944-35-0x000007FEF4600000-0x000007FEF4623000-memory.dmp

    Filesize

    140KB

  • memory/1944-39-0x000007FEF4570000-0x000007FEF4583000-memory.dmp

    Filesize

    76KB

  • memory/1944-38-0x000007FEF4590000-0x000007FEF45B1000-memory.dmp

    Filesize

    132KB

  • memory/1944-42-0x000007FEF7310000-0x000007FEF7320000-memory.dmp

    Filesize

    64KB

  • memory/1944-41-0x000007FEF43D0000-0x000007FEF43E7000-memory.dmp

    Filesize

    92KB

  • memory/1944-40-0x000007FEF43F0000-0x000007FEF4568000-memory.dmp

    Filesize

    1.5MB

  • memory/1944-45-0x000007FEF4360000-0x000007FEF4376000-memory.dmp

    Filesize

    88KB

  • memory/1944-44-0x000007FEF4380000-0x000007FEF4391000-memory.dmp

    Filesize

    68KB

  • memory/1944-46-0x000007FEF4340000-0x000007FEF4355000-memory.dmp

    Filesize

    84KB

  • memory/1944-48-0x000007FEF42E0000-0x000007FEF42F2000-memory.dmp

    Filesize

    72KB

  • memory/1944-47-0x000007FEF4300000-0x000007FEF4311000-memory.dmp

    Filesize

    68KB

  • memory/1944-43-0x000007FEF43A0000-0x000007FEF43CF000-memory.dmp

    Filesize

    188KB

  • memory/1944-49-0x000007FEF4160000-0x000007FEF42DA000-memory.dmp

    Filesize

    1.5MB

  • memory/1944-37-0x000007FEF45C0000-0x000007FEF45D2000-memory.dmp

    Filesize

    72KB

  • memory/1944-50-0x000007FEF4140000-0x000007FEF4153000-memory.dmp

    Filesize

    76KB

  • memory/1944-34-0x000007FEF4630000-0x000007FEF4647000-memory.dmp

    Filesize

    92KB

  • memory/1944-53-0x000007FEF40E0000-0x000007FEF40F1000-memory.dmp

    Filesize

    68KB

  • memory/1944-52-0x000007FEF4100000-0x000007FEF4111000-memory.dmp

    Filesize

    68KB

  • memory/1944-54-0x000007FEF40C0000-0x000007FEF40D1000-memory.dmp

    Filesize

    68KB

  • memory/1944-55-0x000007FEF40A0000-0x000007FEF40B6000-memory.dmp

    Filesize

    88KB

  • memory/1944-51-0x000007FEF4120000-0x000007FEF4134000-memory.dmp

    Filesize

    80KB

  • memory/1944-33-0x000007FEF4650000-0x000007FEF4674000-memory.dmp

    Filesize

    144KB

  • memory/1944-32-0x000007FEF6110000-0x000007FEF6138000-memory.dmp

    Filesize

    160KB