Resubmissions

01-11-2023 06:15

231101-gzwcdabd61 10

01-11-2023 06:14

231101-gzk7eabd6z 6

01-11-2023 05:56

231101-gm3kxsbc3z 6

01-11-2023 05:48

231101-ghw8cadd36 1

01-11-2023 05:45

231101-gftz7sbb6z 1

Analysis

  • max time kernel
    371s
  • max time network
    377s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    01-11-2023 06:14

General

  • Target

    y+tu+keri+o+nooo++#magicgang.mp4

  • Size

    593KB

  • MD5

    017ef81026c1956d8c5cdd2eb68b51c4

  • SHA1

    7a511485e691cc1a7a299f11b5be49fb7e32fd2f

  • SHA256

    51db95fb72ba2b52a47d6824bc65cf055852e7e71b517c282004e47001b631f2

  • SHA512

    44fb405addc45d3efce74e4ddf1542ff50a74c468b38767f11816dce9a8274cd2430f3bf92f20343f470dfa20923458b3f603c0adff65554ccc9f42f57065ef8

  • SSDEEP

    12288:Odeu59/kMA28kWqKF3oa8yzC02xQum10HDdwwvego0BHmdfxqaf:OB/PfmRoNy202nmaHDdwwvelfkaf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 28 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\y+tu+keri+o+nooo++#magicgang.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2788

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2788-5-0x000000013F700000-0x000000013F7F8000-memory.dmp

    Filesize

    992KB

  • memory/2788-6-0x000007FEFB3D0000-0x000007FEFB404000-memory.dmp

    Filesize

    208KB

  • memory/2788-7-0x000007FEF6080000-0x000007FEF6334000-memory.dmp

    Filesize

    2.7MB

  • memory/2788-8-0x000007FEFB6B0000-0x000007FEFB6C8000-memory.dmp

    Filesize

    96KB

  • memory/2788-9-0x000007FEFB420000-0x000007FEFB437000-memory.dmp

    Filesize

    92KB

  • memory/2788-10-0x000007FEFB150000-0x000007FEFB161000-memory.dmp

    Filesize

    68KB

  • memory/2788-11-0x000007FEFB130000-0x000007FEFB147000-memory.dmp

    Filesize

    92KB

  • memory/2788-12-0x000007FEF7A90000-0x000007FEF7AA1000-memory.dmp

    Filesize

    68KB

  • memory/2788-13-0x000007FEF7A70000-0x000007FEF7A8D000-memory.dmp

    Filesize

    116KB

  • memory/2788-14-0x000007FEF7220000-0x000007FEF7231000-memory.dmp

    Filesize

    68KB

  • memory/2788-15-0x000007FEF5E80000-0x000007FEF6080000-memory.dmp

    Filesize

    2.0MB

  • memory/2788-16-0x000007FEF6C70000-0x000007FEF6CAF000-memory.dmp

    Filesize

    252KB

  • memory/2788-18-0x000007FEF6C20000-0x000007FEF6C38000-memory.dmp

    Filesize

    96KB

  • memory/2788-17-0x000007FEF6C40000-0x000007FEF6C61000-memory.dmp

    Filesize

    132KB

  • memory/2788-19-0x000007FEF4DD0000-0x000007FEF5E7B000-memory.dmp

    Filesize

    16.7MB

  • memory/2788-20-0x000007FEF67A0000-0x000007FEF67B1000-memory.dmp

    Filesize

    68KB

  • memory/2788-21-0x000007FEF6780000-0x000007FEF6791000-memory.dmp

    Filesize

    68KB

  • memory/2788-22-0x000007FEF6760000-0x000007FEF6771000-memory.dmp

    Filesize

    68KB

  • memory/2788-23-0x000007FEF6740000-0x000007FEF675B000-memory.dmp

    Filesize

    108KB

  • memory/2788-24-0x000007FEF6720000-0x000007FEF6731000-memory.dmp

    Filesize

    68KB

  • memory/2788-25-0x000007FEF6700000-0x000007FEF6718000-memory.dmp

    Filesize

    96KB

  • memory/2788-26-0x000007FEF66D0000-0x000007FEF6700000-memory.dmp

    Filesize

    192KB

  • memory/2788-27-0x000007FEF4D60000-0x000007FEF4DC7000-memory.dmp

    Filesize

    412KB

  • memory/2788-28-0x000007FEF4CF0000-0x000007FEF4D5F000-memory.dmp

    Filesize

    444KB

  • memory/2788-30-0x000007FEF4C90000-0x000007FEF4CE6000-memory.dmp

    Filesize

    344KB

  • memory/2788-29-0x000007FEF66B0000-0x000007FEF66C1000-memory.dmp

    Filesize

    68KB

  • memory/2788-31-0x000007FEF4B10000-0x000007FEF4C88000-memory.dmp

    Filesize

    1.5MB

  • memory/2788-32-0x000007FEF4AF0000-0x000007FEF4B07000-memory.dmp

    Filesize

    92KB

  • memory/2788-33-0x000007FEF4980000-0x000007FEF4AF0000-memory.dmp

    Filesize

    1.4MB

  • memory/2788-34-0x000007FEF4960000-0x000007FEF4972000-memory.dmp

    Filesize

    72KB

  • memory/2788-36-0x000007FEF48C0000-0x000007FEF490C000-memory.dmp

    Filesize

    304KB

  • memory/2788-35-0x000007FEF4910000-0x000007FEF4952000-memory.dmp

    Filesize

    264KB

  • memory/2788-37-0x000007FEF4750000-0x000007FEF48BB000-memory.dmp

    Filesize

    1.4MB

  • memory/2788-38-0x000007FEF46F0000-0x000007FEF4747000-memory.dmp

    Filesize

    348KB

  • memory/2788-39-0x000007FEF44A0000-0x000007FEF46EB000-memory.dmp

    Filesize

    2.3MB

  • memory/2788-40-0x000007FEED5C0000-0x000007FEEED70000-memory.dmp

    Filesize

    23.7MB

  • memory/2788-41-0x000007FEFB780000-0x000007FEFB790000-memory.dmp

    Filesize

    64KB

  • memory/2788-42-0x000007FEF4470000-0x000007FEF449F000-memory.dmp

    Filesize

    188KB

  • memory/2788-43-0x000007FEF4450000-0x000007FEF4461000-memory.dmp

    Filesize

    68KB

  • memory/2788-44-0x000007FEF4430000-0x000007FEF4446000-memory.dmp

    Filesize

    88KB

  • memory/2788-45-0x000007FEF4360000-0x000007FEF4425000-memory.dmp

    Filesize

    788KB

  • memory/2788-46-0x000007FEF42E0000-0x000007FEF4355000-memory.dmp

    Filesize

    468KB

  • memory/2788-47-0x000007FEF4270000-0x000007FEF42D2000-memory.dmp

    Filesize

    392KB

  • memory/2788-48-0x000007FEF4200000-0x000007FEF426D000-memory.dmp

    Filesize

    436KB

  • memory/2788-49-0x000007FEF41E0000-0x000007FEF41F3000-memory.dmp

    Filesize

    76KB

  • memory/2788-50-0x000007FEF41C0000-0x000007FEF41D4000-memory.dmp

    Filesize

    80KB

  • memory/2788-51-0x000007FEF4170000-0x000007FEF41C0000-memory.dmp

    Filesize

    320KB

  • memory/2788-52-0x000007FEF4150000-0x000007FEF4165000-memory.dmp

    Filesize

    84KB

  • memory/2788-53-0x000007FEF3F30000-0x000007FEF414D000-memory.dmp

    Filesize

    2.1MB

  • memory/2788-54-0x000007FEF3F10000-0x000007FEF3F21000-memory.dmp

    Filesize

    68KB

  • memory/2788-57-0x000007FEF3E80000-0x000007FEF3EA3000-memory.dmp

    Filesize

    140KB

  • memory/2788-58-0x000007FEF3E60000-0x000007FEF3E73000-memory.dmp

    Filesize

    76KB

  • memory/2788-59-0x000007FEF3CE0000-0x000007FEF3E5A000-memory.dmp

    Filesize

    1.5MB

  • memory/2788-56-0x000007FEF3EB0000-0x000007FEF3EC5000-memory.dmp

    Filesize

    84KB

  • memory/2788-55-0x000007FEF3ED0000-0x000007FEF3EE2000-memory.dmp

    Filesize

    72KB

  • memory/2788-60-0x000007FEF3BE0000-0x000007FEF3CD4000-memory.dmp

    Filesize

    976KB

  • memory/2788-62-0x000007FEF3B90000-0x000007FEF3BA3000-memory.dmp

    Filesize

    76KB

  • memory/2788-64-0x000007FEF3B50000-0x000007FEF3B62000-memory.dmp

    Filesize

    72KB

  • memory/2788-67-0x000007FEF3AF0000-0x000007FEF3B04000-memory.dmp

    Filesize

    80KB

  • memory/2788-68-0x000007FEF3AD0000-0x000007FEF3AE2000-memory.dmp

    Filesize

    72KB

  • memory/2788-66-0x000007FEF3B10000-0x000007FEF3B23000-memory.dmp

    Filesize

    76KB

  • memory/2788-65-0x000007FEF3B30000-0x000007FEF3B45000-memory.dmp

    Filesize

    84KB

  • memory/2788-63-0x000007FEF3B70000-0x000007FEF3B8B000-memory.dmp

    Filesize

    108KB

  • memory/2788-61-0x000007FEF3BB0000-0x000007FEF3BDA000-memory.dmp

    Filesize

    168KB