Resubmissions

03/10/2023, 14:56

231003-sbdm7scb8z 7

03/10/2023, 14:35

231003-rx4abadf82 7

02/10/2023, 22:39

231002-2k417afa8s 7

02/10/2023, 21:20

231002-z68v6aeg3z 7

Analysis

  • max time kernel
    291s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2023, 14:56

General

  • Target

    playerexplode.ogg

  • Size

    163KB

  • MD5

    af660e185dbbfb72f7e30311bbd28013

  • SHA1

    a50e062feed661b45a79c51cccf43bcb9a6cb42a

  • SHA256

    f5b62c0027d8cd680f08533702f800ae13217d84f81cf426bffc1b99af3cefab

  • SHA512

    4d950b45847904898ded4309f9e20c4b9bc3de8e7d0f50c4f12626b6cbb50153d263478dac176eebc635607946aa934c3ea351a6246d329046354c436ac77fcb

  • SSDEEP

    3072:LQkpg15Mej4fskkkkkO3AFDxo2dBFCHJ4:0kC/7kkkkkOExo2dBFCp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\playerexplode.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/748-5-0x000000013FED0000-0x000000013FFC8000-memory.dmp

    Filesize

    992KB

  • memory/748-6-0x000007FEFAD50000-0x000007FEFAD84000-memory.dmp

    Filesize

    208KB

  • memory/748-7-0x000007FEF6080000-0x000007FEF6334000-memory.dmp

    Filesize

    2.7MB

  • memory/748-8-0x000007FEFB6A0000-0x000007FEFB6B8000-memory.dmp

    Filesize

    96KB

  • memory/748-9-0x000007FEFAFC0000-0x000007FEFAFD7000-memory.dmp

    Filesize

    92KB

  • memory/748-10-0x000007FEFAD30000-0x000007FEFAD41000-memory.dmp

    Filesize

    68KB

  • memory/748-11-0x000007FEFAD10000-0x000007FEFAD27000-memory.dmp

    Filesize

    92KB

  • memory/748-13-0x000007FEF7720000-0x000007FEF773D000-memory.dmp

    Filesize

    116KB

  • memory/748-12-0x000007FEF7740000-0x000007FEF7751000-memory.dmp

    Filesize

    68KB

  • memory/748-14-0x000007FEF6B90000-0x000007FEF6BA1000-memory.dmp

    Filesize

    68KB

  • memory/748-15-0x000007FEF5E80000-0x000007FEF6080000-memory.dmp

    Filesize

    2.0MB

  • memory/748-16-0x000007FEF4DD0000-0x000007FEF5E7B000-memory.dmp

    Filesize

    16.7MB

  • memory/748-17-0x000007FEF6990000-0x000007FEF69CF000-memory.dmp

    Filesize

    252KB

  • memory/748-18-0x000007FEF6960000-0x000007FEF6981000-memory.dmp

    Filesize

    132KB

  • memory/748-19-0x000007FEF4DB0000-0x000007FEF4DC8000-memory.dmp

    Filesize

    96KB

  • memory/748-20-0x000007FEF4D90000-0x000007FEF4DA1000-memory.dmp

    Filesize

    68KB

  • memory/748-21-0x000007FEF4D70000-0x000007FEF4D81000-memory.dmp

    Filesize

    68KB

  • memory/748-22-0x000007FEF4D50000-0x000007FEF4D61000-memory.dmp

    Filesize

    68KB

  • memory/748-23-0x000007FEF4D30000-0x000007FEF4D4B000-memory.dmp

    Filesize

    108KB

  • memory/748-24-0x000007FEF4D10000-0x000007FEF4D21000-memory.dmp

    Filesize

    68KB

  • memory/748-26-0x000007FEF4CC0000-0x000007FEF4CF0000-memory.dmp

    Filesize

    192KB

  • memory/748-27-0x000007FEF4C50000-0x000007FEF4CB7000-memory.dmp

    Filesize

    412KB

  • memory/748-25-0x000007FEF4CF0000-0x000007FEF4D08000-memory.dmp

    Filesize

    96KB

  • memory/748-28-0x000007FEF4BE0000-0x000007FEF4C4F000-memory.dmp

    Filesize

    444KB

  • memory/748-29-0x000007FEF4BC0000-0x000007FEF4BD1000-memory.dmp

    Filesize

    68KB

  • memory/748-30-0x000007FEF4B60000-0x000007FEF4BBC000-memory.dmp

    Filesize

    368KB

  • memory/748-31-0x000007FEF4B00000-0x000007FEF4B56000-memory.dmp

    Filesize

    344KB

  • memory/748-32-0x000007FEF4AD0000-0x000007FEF4AF8000-memory.dmp

    Filesize

    160KB

  • memory/748-33-0x000007FEF4AA0000-0x000007FEF4AC4000-memory.dmp

    Filesize

    144KB

  • memory/748-35-0x000007FEF4A50000-0x000007FEF4A73000-memory.dmp

    Filesize

    140KB

  • memory/748-36-0x000007FEF4A30000-0x000007FEF4A41000-memory.dmp

    Filesize

    68KB

  • memory/748-37-0x000007FEF4A10000-0x000007FEF4A22000-memory.dmp

    Filesize

    72KB

  • memory/748-38-0x000007FEF49E0000-0x000007FEF4A01000-memory.dmp

    Filesize

    132KB

  • memory/748-39-0x000007FEF49C0000-0x000007FEF49D3000-memory.dmp

    Filesize

    76KB

  • memory/748-34-0x000007FEF4A80000-0x000007FEF4A97000-memory.dmp

    Filesize

    92KB

  • memory/748-40-0x000007FEF4840000-0x000007FEF49B8000-memory.dmp

    Filesize

    1.5MB

  • memory/748-41-0x000007FEF4820000-0x000007FEF4837000-memory.dmp

    Filesize

    92KB

  • memory/748-42-0x000007FEFB040000-0x000007FEFB050000-memory.dmp

    Filesize

    64KB

  • memory/748-43-0x000007FEF47F0000-0x000007FEF481F000-memory.dmp

    Filesize

    188KB

  • memory/748-46-0x000007FEF4790000-0x000007FEF47A5000-memory.dmp

    Filesize

    84KB

  • memory/748-45-0x000007FEF47B0000-0x000007FEF47C6000-memory.dmp

    Filesize

    88KB

  • memory/748-44-0x000007FEF47D0000-0x000007FEF47E1000-memory.dmp

    Filesize

    68KB

  • memory/748-47-0x000007FEF4770000-0x000007FEF4781000-memory.dmp

    Filesize

    68KB

  • memory/748-48-0x000007FEF4730000-0x000007FEF4742000-memory.dmp

    Filesize

    72KB

  • memory/748-49-0x000007FEF45B0000-0x000007FEF472A000-memory.dmp

    Filesize

    1.5MB

  • memory/748-50-0x000007FEF4590000-0x000007FEF45A3000-memory.dmp

    Filesize

    76KB

  • memory/748-51-0x000007FEF4570000-0x000007FEF4584000-memory.dmp

    Filesize

    80KB

  • memory/748-54-0x000007FEF4510000-0x000007FEF4521000-memory.dmp

    Filesize

    68KB

  • memory/748-53-0x000007FEF4530000-0x000007FEF4541000-memory.dmp

    Filesize

    68KB

  • memory/748-52-0x000007FEF4550000-0x000007FEF4561000-memory.dmp

    Filesize

    68KB

  • memory/748-55-0x000007FEF44F0000-0x000007FEF4506000-memory.dmp

    Filesize

    88KB