Analysis

  • max time kernel
    141s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2023, 07:18

General

  • Target

    uh.ogg

  • Size

    14KB

  • MD5

    9223b207343d8cea833932df3ee65218

  • SHA1

    c4d216d376b6a498b3917d88d8c120ee30bb109b

  • SHA256

    bd7bfac235f120e746e0e31374df5a2fb20844a80e79551324fe76387d5d7395

  • SHA512

    d3d2d9824972088d8856bb4318304a81e3224fe4f41a3ac537e306827de3d5cb4c24b76dc03d7f8ff0b6917de84a36e41eaeb2d5751e9467653e3c281ad2fc43

  • SSDEEP

    192:Eqk+XioqPKNLKt9AadirT9NayoNGa9eDT9NayoNGa9eDT9hCMT2cGt/RwSFbjkmB:EGi4xOi3Xay2ePXay2ePYHtJ1Fbjk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\uh.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2800

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2800-5-0x000000013F5C0000-0x000000013F6B8000-memory.dmp

          Filesize

          992KB

        • memory/2800-6-0x000007FEF7650000-0x000007FEF7684000-memory.dmp

          Filesize

          208KB

        • memory/2800-7-0x000007FEF5B40000-0x000007FEF5DF4000-memory.dmp

          Filesize

          2.7MB

        • memory/2800-8-0x000007FEFB1F0000-0x000007FEFB208000-memory.dmp

          Filesize

          96KB

        • memory/2800-9-0x000007FEFAC70000-0x000007FEFAC87000-memory.dmp

          Filesize

          92KB

        • memory/2800-10-0x000007FEF76A0000-0x000007FEF76B1000-memory.dmp

          Filesize

          68KB

        • memory/2800-11-0x000007FEF6D50000-0x000007FEF6D67000-memory.dmp

          Filesize

          92KB

        • memory/2800-12-0x000007FEF67C0000-0x000007FEF67D1000-memory.dmp

          Filesize

          68KB

        • memory/2800-13-0x000007FEF67A0000-0x000007FEF67BD000-memory.dmp

          Filesize

          116KB

        • memory/2800-14-0x000007FEF5940000-0x000007FEF5B40000-memory.dmp

          Filesize

          2.0MB

        • memory/2800-15-0x000007FEF6780000-0x000007FEF6791000-memory.dmp

          Filesize

          68KB

        • memory/2800-16-0x000007FEF6240000-0x000007FEF627F000-memory.dmp

          Filesize

          252KB

        • memory/2800-17-0x000007FEF6750000-0x000007FEF6771000-memory.dmp

          Filesize

          132KB

        • memory/2800-18-0x000007FEF6220000-0x000007FEF6238000-memory.dmp

          Filesize

          96KB

        • memory/2800-19-0x000007FEF6200000-0x000007FEF6211000-memory.dmp

          Filesize

          68KB

        • memory/2800-20-0x000007FEF61E0000-0x000007FEF61F1000-memory.dmp

          Filesize

          68KB

        • memory/2800-21-0x000007FEF61C0000-0x000007FEF61D1000-memory.dmp

          Filesize

          68KB

        • memory/2800-22-0x000007FEF61A0000-0x000007FEF61BB000-memory.dmp

          Filesize

          108KB

        • memory/2800-23-0x000007FEF6180000-0x000007FEF6191000-memory.dmp

          Filesize

          68KB

        • memory/2800-24-0x000007FEF5920000-0x000007FEF5938000-memory.dmp

          Filesize

          96KB

        • memory/2800-25-0x000007FEF58F0000-0x000007FEF5920000-memory.dmp

          Filesize

          192KB

        • memory/2800-26-0x000007FEF4840000-0x000007FEF58EB000-memory.dmp

          Filesize

          16.7MB

        • memory/2800-27-0x000007FEF47D0000-0x000007FEF4837000-memory.dmp

          Filesize

          412KB

        • memory/2800-28-0x000007FEF4760000-0x000007FEF47CF000-memory.dmp

          Filesize

          444KB

        • memory/2800-29-0x000007FEF4740000-0x000007FEF4751000-memory.dmp

          Filesize

          68KB

        • memory/2800-30-0x000007FEF46E0000-0x000007FEF473C000-memory.dmp

          Filesize

          368KB

        • memory/2800-31-0x000007FEF4680000-0x000007FEF46D6000-memory.dmp

          Filesize

          344KB

        • memory/2800-32-0x000007FEF4650000-0x000007FEF4678000-memory.dmp

          Filesize

          160KB

        • memory/2800-33-0x000007FEF4620000-0x000007FEF4644000-memory.dmp

          Filesize

          144KB

        • memory/2800-34-0x000007FEF4600000-0x000007FEF4617000-memory.dmp

          Filesize

          92KB

        • memory/2800-35-0x000007FEF45D0000-0x000007FEF45F3000-memory.dmp

          Filesize

          140KB

        • memory/2800-37-0x000007FEF4590000-0x000007FEF45A2000-memory.dmp

          Filesize

          72KB

        • memory/2800-36-0x000007FEF45B0000-0x000007FEF45C1000-memory.dmp

          Filesize

          68KB

        • memory/2800-38-0x000007FEF4560000-0x000007FEF4581000-memory.dmp

          Filesize

          132KB

        • memory/2800-39-0x000007FEF4540000-0x000007FEF4553000-memory.dmp

          Filesize

          76KB

        • memory/2800-40-0x000007FEF43C0000-0x000007FEF4538000-memory.dmp

          Filesize

          1.5MB

        • memory/2800-41-0x000007FEF43A0000-0x000007FEF43B7000-memory.dmp

          Filesize

          92KB

        • memory/2800-42-0x000007FEF7710000-0x000007FEF7720000-memory.dmp

          Filesize

          64KB

        • memory/2800-43-0x000007FEF4370000-0x000007FEF439F000-memory.dmp

          Filesize

          188KB

        • memory/2800-44-0x000007FEF4350000-0x000007FEF4361000-memory.dmp

          Filesize

          68KB

        • memory/2800-45-0x000007FEF4330000-0x000007FEF4346000-memory.dmp

          Filesize

          88KB

        • memory/2800-46-0x000007FEF4310000-0x000007FEF4325000-memory.dmp

          Filesize

          84KB

        • memory/2800-48-0x000007FEF42B0000-0x000007FEF42C2000-memory.dmp

          Filesize

          72KB

        • memory/2800-47-0x000007FEF42F0000-0x000007FEF4301000-memory.dmp

          Filesize

          68KB

        • memory/2800-49-0x000007FEF4130000-0x000007FEF42AA000-memory.dmp

          Filesize

          1.5MB

        • memory/2800-50-0x000007FEF4110000-0x000007FEF4123000-memory.dmp

          Filesize

          76KB

        • memory/2800-51-0x000007FEF40F0000-0x000007FEF4104000-memory.dmp

          Filesize

          80KB

        • memory/2800-52-0x000007FEF40D0000-0x000007FEF40E1000-memory.dmp

          Filesize

          68KB

        • memory/2800-53-0x000007FEF40B0000-0x000007FEF40C1000-memory.dmp

          Filesize

          68KB

        • memory/2800-54-0x000007FEF4090000-0x000007FEF40A1000-memory.dmp

          Filesize

          68KB

        • memory/2800-55-0x000007FEF4070000-0x000007FEF4086000-memory.dmp

          Filesize

          88KB