Resubmissions
01-11-2023 06:15
231101-gzwcdabd61 1001-11-2023 06:14
231101-gzk7eabd6z 601-11-2023 05:56
231101-gm3kxsbc3z 601-11-2023 05:48
231101-ghw8cadd36 101-11-2023 05:45
231101-gftz7sbb6z 1Analysis
-
max time kernel
371s -
max time network
377s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
01-11-2023 06:14
Static task
static1
Behavioral task
behavioral1
Sample
y+tu+keri+o+nooo++#magicgang.mp4
Resource
win7-20231023-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
y+tu+keri+o+nooo++#magicgang.mp4
Resource
win10v2004-20231023-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
y+tu+keri+o+nooo++#magicgang.mp4
-
Size
593KB
-
MD5
017ef81026c1956d8c5cdd2eb68b51c4
-
SHA1
7a511485e691cc1a7a299f11b5be49fb7e32fd2f
-
SHA256
51db95fb72ba2b52a47d6824bc65cf055852e7e71b517c282004e47001b631f2
-
SHA512
44fb405addc45d3efce74e4ddf1542ff50a74c468b38767f11816dce9a8274cd2430f3bf92f20343f470dfa20923458b3f603c0adff65554ccc9f42f57065ef8
-
SSDEEP
12288:Odeu59/kMA28kWqKF3oa8yzC02xQum10HDdwwvego0BHmdfxqaf:OB/PfmRoNy202nmaHDdwwvelfkaf
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2788 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2788 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2788 vlc.exe Token: SeIncBasePriorityPrivilege 2788 vlc.exe -
Suspicious use of FindShellTrayWindow 28 IoCs
pid Process 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe 2788 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2788 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\y+tu+keri+o+nooo++#magicgang.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2788