Resubmissions

21-10-2023 08:47

231021-kp6l5sfb59 6

21-10-2023 08:41

231021-klqrhsfb36 6

Analysis

  • max time kernel
    141s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    21-10-2023 08:41

General

  • Target

    Untitled video - Made with Clipchamp (31).mp4

  • Size

    20.7MB

  • MD5

    ff59113a24ca929c73a96c758ddc7e86

  • SHA1

    41eb297822314c294a15ad8d8df2bb146bab665d

  • SHA256

    613234970694a6b424a47445f600877e64d6d0898879e05ad52791550e7bbe3f

  • SHA512

    dea73168d9c65a363f04943ea9cfb65aa47ce5a31f62be836dec112898f62e974374315bbaea7467d15387568a5b2461624f949764e258d50ef2a1a3ac0cd7aa

  • SSDEEP

    393216:Pa8iIWNng93ScrROJar32eJ2cjOCxLLa0cW0SDQP8zUCo9yEAOkO1mIaDn:zANJab2eJRjJmW0Sk09Yy6DkI4n

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 29 IoCs
  • Suspicious use of SendNotifyMessage 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Untitled video - Made with Clipchamp (31).mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2660-5-0x000000013FD50000-0x000000013FE48000-memory.dmp

    Filesize

    992KB

  • memory/2660-6-0x000007FEFABE0000-0x000007FEFAC14000-memory.dmp

    Filesize

    208KB

  • memory/2660-7-0x000007FEF5F10000-0x000007FEF61C4000-memory.dmp

    Filesize

    2.7MB

  • memory/2660-8-0x000007FEFB360000-0x000007FEFB378000-memory.dmp

    Filesize

    96KB

  • memory/2660-9-0x000007FEFAD40000-0x000007FEFAD57000-memory.dmp

    Filesize

    92KB

  • memory/2660-11-0x000007FEF7610000-0x000007FEF7627000-memory.dmp

    Filesize

    92KB

  • memory/2660-10-0x000007FEF7640000-0x000007FEF7651000-memory.dmp

    Filesize

    68KB

  • memory/2660-12-0x000007FEF75F0000-0x000007FEF7601000-memory.dmp

    Filesize

    68KB

  • memory/2660-13-0x000007FEF75D0000-0x000007FEF75ED000-memory.dmp

    Filesize

    116KB

  • memory/2660-14-0x000007FEF7410000-0x000007FEF7421000-memory.dmp

    Filesize

    68KB

  • memory/2660-15-0x000007FEF5D10000-0x000007FEF5F10000-memory.dmp

    Filesize

    2.0MB

  • memory/2660-16-0x000007FEF6EB0000-0x000007FEF6EEF000-memory.dmp

    Filesize

    252KB

  • memory/2660-18-0x000007FEF6E80000-0x000007FEF6EA1000-memory.dmp

    Filesize

    132KB

  • memory/2660-17-0x000007FEF4C60000-0x000007FEF5D0B000-memory.dmp

    Filesize

    16.7MB

  • memory/2660-19-0x000007FEF73F0000-0x000007FEF7408000-memory.dmp

    Filesize

    96KB

  • memory/2660-20-0x000007FEF6E60000-0x000007FEF6E71000-memory.dmp

    Filesize

    68KB

  • memory/2660-21-0x000007FEF68D0000-0x000007FEF68E1000-memory.dmp

    Filesize

    68KB

  • memory/2660-22-0x000007FEF68B0000-0x000007FEF68C1000-memory.dmp

    Filesize

    68KB

  • memory/2660-23-0x000007FEF6890000-0x000007FEF68AB000-memory.dmp

    Filesize

    108KB

  • memory/2660-25-0x000007FEF6420000-0x000007FEF6438000-memory.dmp

    Filesize

    96KB

  • memory/2660-24-0x000007FEF6870000-0x000007FEF6881000-memory.dmp

    Filesize

    68KB

  • memory/2660-26-0x000007FEF4C30000-0x000007FEF4C60000-memory.dmp

    Filesize

    192KB

  • memory/2660-27-0x000007FEF4BC0000-0x000007FEF4C27000-memory.dmp

    Filesize

    412KB

  • memory/2660-28-0x000007FEF4B50000-0x000007FEF4BBF000-memory.dmp

    Filesize

    444KB

  • memory/2660-29-0x000007FEF4B30000-0x000007FEF4B41000-memory.dmp

    Filesize

    68KB

  • memory/2660-30-0x000007FEF4AD0000-0x000007FEF4B26000-memory.dmp

    Filesize

    344KB

  • memory/2660-31-0x000007FEF4950000-0x000007FEF4AC8000-memory.dmp

    Filesize

    1.5MB

  • memory/2660-32-0x000007FEF4930000-0x000007FEF4947000-memory.dmp

    Filesize

    92KB

  • memory/2660-33-0x000007FEF47C0000-0x000007FEF4930000-memory.dmp

    Filesize

    1.4MB

  • memory/2660-34-0x000007FEF47A0000-0x000007FEF47B2000-memory.dmp

    Filesize

    72KB

  • memory/2660-35-0x000007FEF4750000-0x000007FEF4792000-memory.dmp

    Filesize

    264KB

  • memory/2660-36-0x000007FEF4700000-0x000007FEF474C000-memory.dmp

    Filesize

    304KB

  • memory/2660-37-0x000007FEF4590000-0x000007FEF46FB000-memory.dmp

    Filesize

    1.4MB

  • memory/2660-38-0x000007FEF4530000-0x000007FEF4587000-memory.dmp

    Filesize

    348KB

  • memory/2660-39-0x000007FEF42E0000-0x000007FEF452B000-memory.dmp

    Filesize

    2.3MB

  • memory/2660-40-0x000007FEF2B30000-0x000007FEF42E0000-memory.dmp

    Filesize

    23.7MB

  • memory/2660-41-0x000007FEFAEB0000-0x000007FEFAEC0000-memory.dmp

    Filesize

    64KB

  • memory/2660-43-0x000007FEF2AE0000-0x000007FEF2AF1000-memory.dmp

    Filesize

    68KB

  • memory/2660-44-0x000007FEF2AC0000-0x000007FEF2AD6000-memory.dmp

    Filesize

    88KB

  • memory/2660-42-0x000007FEF2B00000-0x000007FEF2B2F000-memory.dmp

    Filesize

    188KB

  • memory/2660-45-0x000007FEF29F0000-0x000007FEF2AB5000-memory.dmp

    Filesize

    788KB

  • memory/2660-46-0x000007FEF2970000-0x000007FEF29E5000-memory.dmp

    Filesize

    468KB

  • memory/2660-47-0x000007FEF2900000-0x000007FEF2962000-memory.dmp

    Filesize

    392KB

  • memory/2660-48-0x000007FEF2890000-0x000007FEF28FD000-memory.dmp

    Filesize

    436KB

  • memory/2660-50-0x000007FEF2850000-0x000007FEF2864000-memory.dmp

    Filesize

    80KB

  • memory/2660-49-0x000007FEF2870000-0x000007FEF2883000-memory.dmp

    Filesize

    76KB

  • memory/2660-51-0x000007FEF2800000-0x000007FEF2850000-memory.dmp

    Filesize

    320KB

  • memory/2660-52-0x000007FEF27E0000-0x000007FEF27F5000-memory.dmp

    Filesize

    84KB

  • memory/2660-53-0x000007FEF25C0000-0x000007FEF27DD000-memory.dmp

    Filesize

    2.1MB

  • memory/2660-54-0x000007FEF2580000-0x000007FEF2591000-memory.dmp

    Filesize

    68KB

  • memory/2660-55-0x000007FEF2560000-0x000007FEF2572000-memory.dmp

    Filesize

    72KB

  • memory/2660-56-0x000007FEF2540000-0x000007FEF2555000-memory.dmp

    Filesize

    84KB

  • memory/2660-57-0x000007FEF23C0000-0x000007FEF253A000-memory.dmp

    Filesize

    1.5MB

  • memory/2660-58-0x000007FEF2390000-0x000007FEF23B3000-memory.dmp

    Filesize

    140KB

  • memory/2660-59-0x000007FEF2370000-0x000007FEF2383000-memory.dmp

    Filesize

    76KB

  • memory/2660-60-0x000007FEF2270000-0x000007FEF2364000-memory.dmp

    Filesize

    976KB

  • memory/2660-61-0x000007FEF2240000-0x000007FEF226A000-memory.dmp

    Filesize

    168KB

  • memory/2660-62-0x000007FEF2220000-0x000007FEF2233000-memory.dmp

    Filesize

    76KB

  • memory/2660-64-0x000007FEF21E0000-0x000007FEF21F2000-memory.dmp

    Filesize

    72KB

  • memory/2660-65-0x000007FEF21C0000-0x000007FEF21D5000-memory.dmp

    Filesize

    84KB

  • memory/2660-66-0x000007FEF21A0000-0x000007FEF21B3000-memory.dmp

    Filesize

    76KB

  • memory/2660-63-0x000007FEF2200000-0x000007FEF221B000-memory.dmp

    Filesize

    108KB

  • memory/2660-67-0x000007FEF2180000-0x000007FEF2194000-memory.dmp

    Filesize

    80KB

  • memory/2660-68-0x000007FEF2160000-0x000007FEF2172000-memory.dmp

    Filesize

    72KB