Resubmissions

03/10/2023, 14:56

231003-sbdm7scb8z 7

03/10/2023, 14:35

231003-rx4abadf82 7

02/10/2023, 22:39

231002-2k417afa8s 7

02/10/2023, 21:20

231002-z68v6aeg3z 7

Analysis

  • max time kernel
    292s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2023, 14:56

General

  • Target

    invaderexplode.ogg

  • Size

    55KB

  • MD5

    537c9151405a39433ec115b8c794b1c2

  • SHA1

    911360abe13ca8e6292e9faa5932b362f3d01589

  • SHA256

    cee092248f0b79f0b6e854451d54fe73d23b2d250ed7e2dd3ca7d3aabe7231cf

  • SHA512

    4f38045acf6ecbb534d088f44ff2d6f319056225c747bbe8919da618b0d59fe01a86f1c53494d01c97849aa5f18781b2ccffd3d23c4ca014d9905e84125942bb

  • SSDEEP

    1536:7loX67Qpwx3e7Wn02DaM/89xUrb8HcUND:7l4cQ2he7emM/8UrIcm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\invaderexplode.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2816-6-0x000007FEF7F00000-0x000007FEF7F34000-memory.dmp

    Filesize

    208KB

  • memory/2816-5-0x000000013FB30000-0x000000013FC28000-memory.dmp

    Filesize

    992KB

  • memory/2816-7-0x000007FEF6350000-0x000007FEF6604000-memory.dmp

    Filesize

    2.7MB

  • memory/2816-8-0x000007FEFB9A0000-0x000007FEFB9B8000-memory.dmp

    Filesize

    96KB

  • memory/2816-9-0x000007FEFB5D0000-0x000007FEFB5E7000-memory.dmp

    Filesize

    92KB

  • memory/2816-10-0x000007FEF7F50000-0x000007FEF7F61000-memory.dmp

    Filesize

    68KB

  • memory/2816-11-0x000007FEF7020000-0x000007FEF7037000-memory.dmp

    Filesize

    92KB

  • memory/2816-12-0x000007FEF7000000-0x000007FEF7011000-memory.dmp

    Filesize

    68KB

  • memory/2816-13-0x000007FEF6FE0000-0x000007FEF6FFD000-memory.dmp

    Filesize

    116KB

  • memory/2816-14-0x000007FEF6B00000-0x000007FEF6B11000-memory.dmp

    Filesize

    68KB

  • memory/2816-15-0x000007FEF6150000-0x000007FEF6350000-memory.dmp

    Filesize

    2.0MB

  • memory/2816-16-0x000007FEF50A0000-0x000007FEF614B000-memory.dmp

    Filesize

    16.7MB

  • memory/2816-19-0x000007FEF6A00000-0x000007FEF6A18000-memory.dmp

    Filesize

    96KB

  • memory/2816-18-0x000007FEF6A20000-0x000007FEF6A41000-memory.dmp

    Filesize

    132KB

  • memory/2816-20-0x000007FEF69E0000-0x000007FEF69F1000-memory.dmp

    Filesize

    68KB

  • memory/2816-17-0x000007FEF6A50000-0x000007FEF6A8F000-memory.dmp

    Filesize

    252KB

  • memory/2816-21-0x000007FEF69C0000-0x000007FEF69D1000-memory.dmp

    Filesize

    68KB

  • memory/2816-22-0x000007FEF69A0000-0x000007FEF69B1000-memory.dmp

    Filesize

    68KB

  • memory/2816-23-0x000007FEF6980000-0x000007FEF699B000-memory.dmp

    Filesize

    108KB

  • memory/2816-24-0x000007FEF5080000-0x000007FEF5091000-memory.dmp

    Filesize

    68KB

  • memory/2816-25-0x000007FEF5060000-0x000007FEF5078000-memory.dmp

    Filesize

    96KB

  • memory/2816-26-0x000007FEF5030000-0x000007FEF5060000-memory.dmp

    Filesize

    192KB

  • memory/2816-27-0x000007FEF4FC0000-0x000007FEF5027000-memory.dmp

    Filesize

    412KB

  • memory/2816-28-0x000007FEF4F50000-0x000007FEF4FBF000-memory.dmp

    Filesize

    444KB

  • memory/2816-29-0x000007FEF4F30000-0x000007FEF4F41000-memory.dmp

    Filesize

    68KB

  • memory/2816-30-0x000007FEF4ED0000-0x000007FEF4F2C000-memory.dmp

    Filesize

    368KB

  • memory/2816-31-0x000007FEF4E70000-0x000007FEF4EC6000-memory.dmp

    Filesize

    344KB

  • memory/2816-32-0x000007FEF4E40000-0x000007FEF4E68000-memory.dmp

    Filesize

    160KB

  • memory/2816-34-0x000007FEF4DF0000-0x000007FEF4E07000-memory.dmp

    Filesize

    92KB

  • memory/2816-33-0x000007FEF4E10000-0x000007FEF4E34000-memory.dmp

    Filesize

    144KB

  • memory/2816-36-0x000007FEF4DA0000-0x000007FEF4DB1000-memory.dmp

    Filesize

    68KB

  • memory/2816-35-0x000007FEF4DC0000-0x000007FEF4DE3000-memory.dmp

    Filesize

    140KB

  • memory/2816-37-0x000007FEF4D80000-0x000007FEF4D92000-memory.dmp

    Filesize

    72KB

  • memory/2816-38-0x000007FEF4D50000-0x000007FEF4D71000-memory.dmp

    Filesize

    132KB

  • memory/2816-39-0x000007FEF4D30000-0x000007FEF4D43000-memory.dmp

    Filesize

    76KB

  • memory/2816-40-0x000007FEF4BB0000-0x000007FEF4D28000-memory.dmp

    Filesize

    1.5MB

  • memory/2816-41-0x000007FEF4B90000-0x000007FEF4BA7000-memory.dmp

    Filesize

    92KB

  • memory/2816-42-0x000007FEF7FC0000-0x000007FEF7FD0000-memory.dmp

    Filesize

    64KB

  • memory/2816-46-0x000007FEF4B00000-0x000007FEF4B15000-memory.dmp

    Filesize

    84KB

  • memory/2816-45-0x000007FEF4B20000-0x000007FEF4B36000-memory.dmp

    Filesize

    88KB

  • memory/2816-44-0x000007FEF4B40000-0x000007FEF4B51000-memory.dmp

    Filesize

    68KB

  • memory/2816-43-0x000007FEF4B60000-0x000007FEF4B8F000-memory.dmp

    Filesize

    188KB

  • memory/2816-47-0x000007FEF4AE0000-0x000007FEF4AF1000-memory.dmp

    Filesize

    68KB

  • memory/2816-48-0x000007FEF4AA0000-0x000007FEF4AB2000-memory.dmp

    Filesize

    72KB

  • memory/2816-49-0x000007FEF4920000-0x000007FEF4A9A000-memory.dmp

    Filesize

    1.5MB

  • memory/2816-50-0x000007FEF4900000-0x000007FEF4913000-memory.dmp

    Filesize

    76KB

  • memory/2816-51-0x000007FEF48E0000-0x000007FEF48F4000-memory.dmp

    Filesize

    80KB

  • memory/2816-52-0x000007FEF48C0000-0x000007FEF48D1000-memory.dmp

    Filesize

    68KB

  • memory/2816-53-0x000007FEF48A0000-0x000007FEF48B1000-memory.dmp

    Filesize

    68KB

  • memory/2816-54-0x000007FEF4880000-0x000007FEF4891000-memory.dmp

    Filesize

    68KB

  • memory/2816-55-0x000007FEF4860000-0x000007FEF4876000-memory.dmp

    Filesize

    88KB