Resubmissions

03-10-2023 14:56

231003-sbdm7scb8z 7

03-10-2023 14:35

231003-rx4abadf82 7

02-10-2023 22:39

231002-2k417afa8s 7

02-10-2023 21:20

231002-z68v6aeg3z 7

Analysis

  • max time kernel
    141s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    02-10-2023 22:39

General

  • Target

    playerexplode.ogg

  • Size

    163KB

  • MD5

    af660e185dbbfb72f7e30311bbd28013

  • SHA1

    a50e062feed661b45a79c51cccf43bcb9a6cb42a

  • SHA256

    f5b62c0027d8cd680f08533702f800ae13217d84f81cf426bffc1b99af3cefab

  • SHA512

    4d950b45847904898ded4309f9e20c4b9bc3de8e7d0f50c4f12626b6cbb50153d263478dac176eebc635607946aa934c3ea351a6246d329046354c436ac77fcb

  • SSDEEP

    3072:LQkpg15Mej4fskkkkkO3AFDxo2dBFCHJ4:0kC/7kkkkkOExo2dBFCp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\playerexplode.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2100-5-0x000000013F730000-0x000000013F828000-memory.dmp

    Filesize

    992KB

  • memory/2100-6-0x000007FEFADD0000-0x000007FEFAE04000-memory.dmp

    Filesize

    208KB

  • memory/2100-7-0x000007FEF6250000-0x000007FEF6504000-memory.dmp

    Filesize

    2.7MB

  • memory/2100-8-0x000007FEFB6F0000-0x000007FEFB708000-memory.dmp

    Filesize

    96KB

  • memory/2100-9-0x000007FEFB150000-0x000007FEFB167000-memory.dmp

    Filesize

    92KB

  • memory/2100-10-0x000007FEFB060000-0x000007FEFB071000-memory.dmp

    Filesize

    68KB

  • memory/2100-11-0x000007FEFAB10000-0x000007FEFAB27000-memory.dmp

    Filesize

    92KB

  • memory/2100-12-0x000007FEFAAF0000-0x000007FEFAB01000-memory.dmp

    Filesize

    68KB

  • memory/2100-13-0x000007FEFAAD0000-0x000007FEFAAED000-memory.dmp

    Filesize

    116KB

  • memory/2100-14-0x000007FEF7720000-0x000007FEF7731000-memory.dmp

    Filesize

    68KB

  • memory/2100-15-0x000007FEF6050000-0x000007FEF6250000-memory.dmp

    Filesize

    2.0MB

  • memory/2100-16-0x000007FEF6BD0000-0x000007FEF6C0F000-memory.dmp

    Filesize

    252KB

  • memory/2100-18-0x000007FEF6BA0000-0x000007FEF6BC1000-memory.dmp

    Filesize

    132KB

  • memory/2100-17-0x000007FEF4FA0000-0x000007FEF604B000-memory.dmp

    Filesize

    16.7MB

  • memory/2100-19-0x000007FEF6B80000-0x000007FEF6B98000-memory.dmp

    Filesize

    96KB

  • memory/2100-21-0x000007FEF4F60000-0x000007FEF4F71000-memory.dmp

    Filesize

    68KB

  • memory/2100-20-0x000007FEF4F80000-0x000007FEF4F91000-memory.dmp

    Filesize

    68KB

  • memory/2100-22-0x000007FEF4F40000-0x000007FEF4F51000-memory.dmp

    Filesize

    68KB

  • memory/2100-23-0x000007FEF4F20000-0x000007FEF4F3B000-memory.dmp

    Filesize

    108KB

  • memory/2100-25-0x000007FEF4EE0000-0x000007FEF4EF8000-memory.dmp

    Filesize

    96KB

  • memory/2100-24-0x000007FEF4F00000-0x000007FEF4F11000-memory.dmp

    Filesize

    68KB

  • memory/2100-26-0x000007FEF4EB0000-0x000007FEF4EE0000-memory.dmp

    Filesize

    192KB

  • memory/2100-27-0x000007FEF4E40000-0x000007FEF4EA7000-memory.dmp

    Filesize

    412KB

  • memory/2100-28-0x000007FEF4DD0000-0x000007FEF4E3F000-memory.dmp

    Filesize

    444KB

  • memory/2100-29-0x000007FEF4DB0000-0x000007FEF4DC1000-memory.dmp

    Filesize

    68KB

  • memory/2100-30-0x000007FEF4D50000-0x000007FEF4DAC000-memory.dmp

    Filesize

    368KB

  • memory/2100-31-0x000007FEF4CF0000-0x000007FEF4D46000-memory.dmp

    Filesize

    344KB

  • memory/2100-32-0x000007FEF4CC0000-0x000007FEF4CE8000-memory.dmp

    Filesize

    160KB

  • memory/2100-34-0x000007FEF4C70000-0x000007FEF4C87000-memory.dmp

    Filesize

    92KB

  • memory/2100-35-0x000007FEF4C40000-0x000007FEF4C63000-memory.dmp

    Filesize

    140KB

  • memory/2100-33-0x000007FEF4C90000-0x000007FEF4CB4000-memory.dmp

    Filesize

    144KB

  • memory/2100-36-0x000007FEF4C20000-0x000007FEF4C31000-memory.dmp

    Filesize

    68KB

  • memory/2100-37-0x000007FEF4C00000-0x000007FEF4C12000-memory.dmp

    Filesize

    72KB

  • memory/2100-38-0x000007FEF4BD0000-0x000007FEF4BF1000-memory.dmp

    Filesize

    132KB

  • memory/2100-39-0x000007FEF4BB0000-0x000007FEF4BC3000-memory.dmp

    Filesize

    76KB

  • memory/2100-40-0x000007FEF4A30000-0x000007FEF4BA8000-memory.dmp

    Filesize

    1.5MB

  • memory/2100-41-0x000007FEF4A10000-0x000007FEF4A27000-memory.dmp

    Filesize

    92KB

  • memory/2100-42-0x000007FEFB1D0000-0x000007FEFB1E0000-memory.dmp

    Filesize

    64KB

  • memory/2100-43-0x000007FEF49E0000-0x000007FEF4A0F000-memory.dmp

    Filesize

    188KB

  • memory/2100-44-0x000007FEF49C0000-0x000007FEF49D1000-memory.dmp

    Filesize

    68KB

  • memory/2100-47-0x000007FEF4940000-0x000007FEF4951000-memory.dmp

    Filesize

    68KB

  • memory/2100-46-0x000007FEF4980000-0x000007FEF4995000-memory.dmp

    Filesize

    84KB

  • memory/2100-45-0x000007FEF49A0000-0x000007FEF49B6000-memory.dmp

    Filesize

    88KB

  • memory/2100-48-0x000007FEF4920000-0x000007FEF4932000-memory.dmp

    Filesize

    72KB

  • memory/2100-49-0x000007FEF47A0000-0x000007FEF491A000-memory.dmp

    Filesize

    1.5MB

  • memory/2100-50-0x000007FEF4780000-0x000007FEF4793000-memory.dmp

    Filesize

    76KB

  • memory/2100-51-0x000007FEF4760000-0x000007FEF4774000-memory.dmp

    Filesize

    80KB

  • memory/2100-52-0x000007FEF4740000-0x000007FEF4751000-memory.dmp

    Filesize

    68KB

  • memory/2100-54-0x000007FEF4700000-0x000007FEF4711000-memory.dmp

    Filesize

    68KB

  • memory/2100-53-0x000007FEF4720000-0x000007FEF4731000-memory.dmp

    Filesize

    68KB

  • memory/2100-55-0x000007FEF46E0000-0x000007FEF46F6000-memory.dmp

    Filesize

    88KB