Analysis

  • max time kernel
    147s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    08/10/2023, 00:49

General

  • Target

    BaseAfterBase.mp3

  • Size

    1.3MB

  • MD5

    ea337dec695b6ffa77b8bc93ad3e2f6f

  • SHA1

    e609cc6976c0e715610e314f1662694a667337b7

  • SHA256

    32cb477c3cddf168fd556d2d27fbfb6d324bc49f1333442470c3039cd75ccd59

  • SHA512

    bbda38061ec5f3bfc7678eb2936c80cd8445ee9288bf2abca6bf80d6b2bd963af9f113f205c1ff4070a32a60b56a5564e5cda20af9adefa4a3cecac706660a2a

  • SSDEEP

    24576:J57SOSbCuAvsHTsisNOL0NVYDR50PPZg8ujl4QKow7/BT0qHwnmFiNcW:J1KrAvs/swwjFHCjl0ow7/BA7n/P

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\BaseAfterBase.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2948-5-0x000000013FC20000-0x000000013FD18000-memory.dmp

    Filesize

    992KB

  • memory/2948-6-0x000007FEFBA00000-0x000007FEFBA34000-memory.dmp

    Filesize

    208KB

  • memory/2948-7-0x000007FEF67F0000-0x000007FEF6AA4000-memory.dmp

    Filesize

    2.7MB

  • memory/2948-8-0x000007FEFBDB0000-0x000007FEFBDC8000-memory.dmp

    Filesize

    96KB

  • memory/2948-12-0x000007FEF79E0000-0x000007FEF79F1000-memory.dmp

    Filesize

    68KB

  • memory/2948-11-0x000007FEF7F60000-0x000007FEF7F77000-memory.dmp

    Filesize

    92KB

  • memory/2948-10-0x000007FEF7FF0000-0x000007FEF8001000-memory.dmp

    Filesize

    68KB

  • memory/2948-9-0x000007FEFBAF0000-0x000007FEFBB07000-memory.dmp

    Filesize

    92KB

  • memory/2948-13-0x000007FEF79C0000-0x000007FEF79DD000-memory.dmp

    Filesize

    116KB

  • memory/2948-14-0x000007FEF79A0000-0x000007FEF79B1000-memory.dmp

    Filesize

    68KB

  • memory/2948-15-0x000007FEF5740000-0x000007FEF67EB000-memory.dmp

    Filesize

    16.7MB

  • memory/2948-16-0x000007FEF5540000-0x000007FEF5740000-memory.dmp

    Filesize

    2.0MB

  • memory/2948-25-0x000007FEF7390000-0x000007FEF73A8000-memory.dmp

    Filesize

    96KB

  • memory/2948-27-0x000007FEF72F0000-0x000007FEF7357000-memory.dmp

    Filesize

    412KB

  • memory/2948-35-0x000007FEF54D0000-0x000007FEF54E1000-memory.dmp

    Filesize

    68KB

  • memory/2948-42-0x000007FEF5340000-0x000007FEF535E000-memory.dmp

    Filesize

    120KB

  • memory/2948-49-0x000007FEF5240000-0x000007FEF5257000-memory.dmp

    Filesize

    92KB

  • memory/2948-48-0x000007FEF5260000-0x000007FEF5290000-memory.dmp

    Filesize

    192KB

  • memory/2948-47-0x000007FEF5290000-0x000007FEF52A2000-memory.dmp

    Filesize

    72KB

  • memory/2948-46-0x000007FEF52B0000-0x000007FEF52DC000-memory.dmp

    Filesize

    176KB

  • memory/2948-45-0x000007FEF52E0000-0x000007FEF52F4000-memory.dmp

    Filesize

    80KB

  • memory/2948-44-0x000007FEF5300000-0x000007FEF5315000-memory.dmp

    Filesize

    84KB

  • memory/2948-43-0x000007FEF5320000-0x000007FEF5336000-memory.dmp

    Filesize

    88KB

  • memory/2948-41-0x000007FEF5360000-0x000007FEF5374000-memory.dmp

    Filesize

    80KB

  • memory/2948-52-0x000007FEF3A50000-0x000007FEF3A62000-memory.dmp

    Filesize

    72KB

  • memory/2948-59-0x000007FEF37D0000-0x000007FEF37E6000-memory.dmp

    Filesize

    88KB

  • memory/2948-62-0x000007FEF3670000-0x000007FEF36DD000-memory.dmp

    Filesize

    436KB

  • memory/2948-65-0x000007FEF35F0000-0x000007FEF3602000-memory.dmp

    Filesize

    72KB

  • memory/2948-66-0x000007FEF3470000-0x000007FEF35EA000-memory.dmp

    Filesize

    1.5MB

  • memory/2948-64-0x000007FEF3610000-0x000007FEF3621000-memory.dmp

    Filesize

    68KB

  • memory/2948-63-0x000007FEF3650000-0x000007FEF3665000-memory.dmp

    Filesize

    84KB

  • memory/2948-61-0x000007FEF36E0000-0x000007FEF3742000-memory.dmp

    Filesize

    392KB

  • memory/2948-60-0x000007FEF3750000-0x000007FEF37C5000-memory.dmp

    Filesize

    468KB

  • memory/2948-58-0x000007FEFC2B0000-0x000007FEFC2C0000-memory.dmp

    Filesize

    64KB

  • memory/2948-57-0x000007FEF37F0000-0x000007FEF3814000-memory.dmp

    Filesize

    144KB

  • memory/2948-56-0x000007FEF3820000-0x000007FEF3848000-memory.dmp

    Filesize

    160KB

  • memory/2948-55-0x000007FEF3850000-0x000007FEF38A6000-memory.dmp

    Filesize

    344KB

  • memory/2948-54-0x000007FEF38B0000-0x000007FEF38C7000-memory.dmp

    Filesize

    92KB

  • memory/2948-53-0x000007FEF38D0000-0x000007FEF3A48000-memory.dmp

    Filesize

    1.5MB

  • memory/2948-51-0x000007FEF3A70000-0x000007FEF3A81000-memory.dmp

    Filesize

    68KB

  • memory/2948-50-0x000007FEF3A90000-0x000007FEF5240000-memory.dmp

    Filesize

    23.7MB

  • memory/2948-40-0x000007FEF5380000-0x000007FEF5392000-memory.dmp

    Filesize

    72KB

  • memory/2948-39-0x000007FEF53A0000-0x000007FEF53B4000-memory.dmp

    Filesize

    80KB

  • memory/2948-38-0x000007FEF53C0000-0x000007FEF53D1000-memory.dmp

    Filesize

    68KB

  • memory/2948-37-0x000007FEF53E0000-0x000007FEF53F2000-memory.dmp

    Filesize

    72KB

  • memory/2948-36-0x000007FEF5400000-0x000007FEF54C5000-memory.dmp

    Filesize

    788KB

  • memory/2948-34-0x000007FEF54F0000-0x000007FEF5503000-memory.dmp

    Filesize

    76KB

  • memory/2948-33-0x000007FEF5510000-0x000007FEF553F000-memory.dmp

    Filesize

    188KB

  • memory/2948-32-0x000007FEF6E20000-0x000007FEF6E77000-memory.dmp

    Filesize

    348KB

  • memory/2948-31-0x000007FEF6E80000-0x000007FEF6E91000-memory.dmp

    Filesize

    68KB

  • memory/2948-30-0x000007FEF6EA0000-0x000007FEF6EB7000-memory.dmp

    Filesize

    92KB

  • memory/2948-29-0x000007FEF6EC0000-0x000007FEF6ED1000-memory.dmp

    Filesize

    68KB

  • memory/2948-28-0x000007FEF6EE0000-0x000007FEF6F4F000-memory.dmp

    Filesize

    444KB

  • memory/2948-26-0x000007FEF7360000-0x000007FEF7390000-memory.dmp

    Filesize

    192KB

  • memory/2948-24-0x000007FEF73B0000-0x000007FEF73C1000-memory.dmp

    Filesize

    68KB

  • memory/2948-23-0x000007FEF73D0000-0x000007FEF73EB000-memory.dmp

    Filesize

    108KB

  • memory/2948-22-0x000007FEF73F0000-0x000007FEF7401000-memory.dmp

    Filesize

    68KB

  • memory/2948-21-0x000007FEF7410000-0x000007FEF7421000-memory.dmp

    Filesize

    68KB

  • memory/2948-20-0x000007FEF7430000-0x000007FEF7441000-memory.dmp

    Filesize

    68KB

  • memory/2948-19-0x000007FEF7510000-0x000007FEF7528000-memory.dmp

    Filesize

    96KB

  • memory/2948-18-0x000007FEF7450000-0x000007FEF7471000-memory.dmp

    Filesize

    132KB

  • memory/2948-17-0x000007FEF7960000-0x000007FEF799F000-memory.dmp

    Filesize

    252KB