Resubmissions

03/10/2023, 14:56

231003-sbdm7scb8z 7

03/10/2023, 14:35

231003-rx4abadf82 7

02/10/2023, 22:39

231002-2k417afa8s 7

02/10/2023, 21:20

231002-z68v6aeg3z 7

Analysis

  • max time kernel
    141s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2023, 22:39

General

  • Target

    uh.ogg

  • Size

    14KB

  • MD5

    9223b207343d8cea833932df3ee65218

  • SHA1

    c4d216d376b6a498b3917d88d8c120ee30bb109b

  • SHA256

    bd7bfac235f120e746e0e31374df5a2fb20844a80e79551324fe76387d5d7395

  • SHA512

    d3d2d9824972088d8856bb4318304a81e3224fe4f41a3ac537e306827de3d5cb4c24b76dc03d7f8ff0b6917de84a36e41eaeb2d5751e9467653e3c281ad2fc43

  • SSDEEP

    192:Eqk+XioqPKNLKt9AadirT9NayoNGa9eDT9NayoNGa9eDT9hCMT2cGt/RwSFbjkmB:EGi4xOi3Xay2ePXay2ePYHtJ1Fbjk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\uh.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2312

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2312-5-0x000000013F350000-0x000000013F448000-memory.dmp

    Filesize

    992KB

  • memory/2312-6-0x000007FEFAEB0000-0x000007FEFAEE4000-memory.dmp

    Filesize

    208KB

  • memory/2312-7-0x000007FEF6100000-0x000007FEF63B4000-memory.dmp

    Filesize

    2.7MB

  • memory/2312-8-0x000007FEFB220000-0x000007FEFB238000-memory.dmp

    Filesize

    96KB

  • memory/2312-9-0x000007FEFB130000-0x000007FEFB147000-memory.dmp

    Filesize

    92KB

  • memory/2312-10-0x000007FEFABA0000-0x000007FEFABB1000-memory.dmp

    Filesize

    68KB

  • memory/2312-11-0x000007FEFAB80000-0x000007FEFAB97000-memory.dmp

    Filesize

    92KB

  • memory/2312-12-0x000007FEFAB60000-0x000007FEFAB71000-memory.dmp

    Filesize

    68KB

  • memory/2312-13-0x000007FEF78A0000-0x000007FEF78BD000-memory.dmp

    Filesize

    116KB

  • memory/2312-14-0x000007FEF7880000-0x000007FEF7891000-memory.dmp

    Filesize

    68KB

  • memory/2312-15-0x000007FEF5F00000-0x000007FEF6100000-memory.dmp

    Filesize

    2.0MB

  • memory/2312-16-0x000007FEF4E50000-0x000007FEF5EFB000-memory.dmp

    Filesize

    16.7MB

  • memory/2312-17-0x000007FEF7840000-0x000007FEF787F000-memory.dmp

    Filesize

    252KB

  • memory/2312-22-0x000007FEF7250000-0x000007FEF7261000-memory.dmp

    Filesize

    68KB

  • memory/2312-21-0x000007FEF77B0000-0x000007FEF77C1000-memory.dmp

    Filesize

    68KB

  • memory/2312-20-0x000007FEF77D0000-0x000007FEF77E1000-memory.dmp

    Filesize

    68KB

  • memory/2312-19-0x000007FEF77F0000-0x000007FEF7808000-memory.dmp

    Filesize

    96KB

  • memory/2312-18-0x000007FEF7810000-0x000007FEF7831000-memory.dmp

    Filesize

    132KB

  • memory/2312-27-0x000007FEF4DE0000-0x000007FEF4E47000-memory.dmp

    Filesize

    412KB

  • memory/2312-26-0x000007FEF6C60000-0x000007FEF6C90000-memory.dmp

    Filesize

    192KB

  • memory/2312-25-0x000007FEF6C90000-0x000007FEF6CA8000-memory.dmp

    Filesize

    96KB

  • memory/2312-24-0x000007FEF7210000-0x000007FEF7221000-memory.dmp

    Filesize

    68KB

  • memory/2312-23-0x000007FEF7230000-0x000007FEF724B000-memory.dmp

    Filesize

    108KB

  • memory/2312-28-0x000007FEF4D70000-0x000007FEF4DDF000-memory.dmp

    Filesize

    444KB

  • memory/2312-29-0x000007FEF6C40000-0x000007FEF6C51000-memory.dmp

    Filesize

    68KB

  • memory/2312-30-0x000007FEF4D10000-0x000007FEF4D6C000-memory.dmp

    Filesize

    368KB

  • memory/2312-31-0x000007FEF4CB0000-0x000007FEF4D06000-memory.dmp

    Filesize

    344KB

  • memory/2312-32-0x000007FEF4C80000-0x000007FEF4CA8000-memory.dmp

    Filesize

    160KB

  • memory/2312-34-0x000007FEF6C20000-0x000007FEF6C37000-memory.dmp

    Filesize

    92KB

  • memory/2312-33-0x000007FEF4C50000-0x000007FEF4C74000-memory.dmp

    Filesize

    144KB

  • memory/2312-37-0x000007FEF4BE0000-0x000007FEF4BF2000-memory.dmp

    Filesize

    72KB

  • memory/2312-36-0x000007FEF4C00000-0x000007FEF4C11000-memory.dmp

    Filesize

    68KB

  • memory/2312-35-0x000007FEF4C20000-0x000007FEF4C43000-memory.dmp

    Filesize

    140KB

  • memory/2312-38-0x000007FEF4BB0000-0x000007FEF4BD1000-memory.dmp

    Filesize

    132KB

  • memory/2312-39-0x000007FEF4B90000-0x000007FEF4BA3000-memory.dmp

    Filesize

    76KB

  • memory/2312-40-0x000007FEF4A10000-0x000007FEF4B88000-memory.dmp

    Filesize

    1.5MB

  • memory/2312-41-0x000007FEF49F0000-0x000007FEF4A07000-memory.dmp

    Filesize

    92KB

  • memory/2312-42-0x000007FEFB250000-0x000007FEFB260000-memory.dmp

    Filesize

    64KB

  • memory/2312-43-0x000007FEF49C0000-0x000007FEF49EF000-memory.dmp

    Filesize

    188KB

  • memory/2312-44-0x000007FEF49A0000-0x000007FEF49B1000-memory.dmp

    Filesize

    68KB

  • memory/2312-45-0x000007FEF4980000-0x000007FEF4996000-memory.dmp

    Filesize

    88KB

  • memory/2312-46-0x000007FEF4960000-0x000007FEF4975000-memory.dmp

    Filesize

    84KB

  • memory/2312-47-0x000007FEF4940000-0x000007FEF4951000-memory.dmp

    Filesize

    68KB

  • memory/2312-48-0x000007FEF4920000-0x000007FEF4932000-memory.dmp

    Filesize

    72KB

  • memory/2312-51-0x000007FEF4760000-0x000007FEF4774000-memory.dmp

    Filesize

    80KB

  • memory/2312-50-0x000007FEF4780000-0x000007FEF4793000-memory.dmp

    Filesize

    76KB

  • memory/2312-49-0x000007FEF47A0000-0x000007FEF491A000-memory.dmp

    Filesize

    1.5MB

  • memory/2312-52-0x000007FEF4740000-0x000007FEF4751000-memory.dmp

    Filesize

    68KB

  • memory/2312-53-0x000007FEF4720000-0x000007FEF4731000-memory.dmp

    Filesize

    68KB

  • memory/2312-54-0x000007FEF4700000-0x000007FEF4711000-memory.dmp

    Filesize

    68KB

  • memory/2312-55-0x000007FEF46E0000-0x000007FEF46F6000-memory.dmp

    Filesize

    88KB