Overview
overview
7Static
static
7undertale.apk
android-9-x86
4undertale.apk
android-10-x64
4abc_123_a.ogg
windows7-x64
1abc_123_a.ogg
windows10-2004-x64
7game.droid
windows7-x64
3game.droid
windows10-2004-x64
3mus_a2.ogg
windows7-x64
1mus_a2.ogg
windows10-2004-x64
7mus_alphysfix.ogg
windows7-x64
1mus_alphysfix.ogg
windows10-2004-x64
7mus_amalgam.ogg
windows7-x64
1mus_amalgam.ogg
windows10-2004-x64
7mus_ambientwater.ogg
windows7-x64
1mus_ambientwater.ogg
windows10-2004-x64
7mus_anothermedium.ogg
windows7-x64
1mus_anothermedium.ogg
windows10-2004-x64
7mus_bad.ogg
windows7-x64
1mus_bad.ogg
windows10-2004-x64
7mus_barrier.ogg
windows7-x64
1mus_barrier.ogg
windows10-2004-x64
7mus_battle1.ogg
windows7-x64
1mus_battle1.ogg
windows10-2004-x64
7mus_battle2.ogg
windows7-x64
1mus_battle2.ogg
windows10-2004-x64
7mus_bergen...ng.ogg
windows7-x64
1mus_bergen...ng.ogg
windows10-2004-x64
7mus_bgflameA.ogg
windows7-x64
1mus_bgflameA.ogg
windows10-2004-x64
7mus_birdnoise.ogg
windows7-x64
1mus_birdnoise.ogg
windows10-2004-x64
7mus_birdsong.ogg
windows7-x64
1mus_birdsong.ogg
windows10-2004-x64
7Analysis
-
max time kernel
199s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
02/11/2023, 22:44
Static task
static1
Behavioral task
behavioral1
Sample
undertale.apk
Resource
android-x86-arm-20231023-en
Behavioral task
behavioral2
Sample
undertale.apk
Resource
android-x64-20231023.1-en
Behavioral task
behavioral3
Sample
abc_123_a.ogg
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
abc_123_a.ogg
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
game.droid
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
game.droid
Resource
win10v2004-20231020-en
Behavioral task
behavioral7
Sample
mus_a2.ogg
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
mus_a2.ogg
Resource
win10v2004-20231025-en
Behavioral task
behavioral9
Sample
mus_alphysfix.ogg
Resource
win7-20231023-en
Behavioral task
behavioral10
Sample
mus_alphysfix.ogg
Resource
win10v2004-20231023-en
Behavioral task
behavioral11
Sample
mus_amalgam.ogg
Resource
win7-20231025-en
Behavioral task
behavioral12
Sample
mus_amalgam.ogg
Resource
win10v2004-20231023-en
Behavioral task
behavioral13
Sample
mus_ambientwater.ogg
Resource
win7-20231023-en
Behavioral task
behavioral14
Sample
mus_ambientwater.ogg
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
mus_anothermedium.ogg
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
mus_anothermedium.ogg
Resource
win10v2004-20231020-en
Behavioral task
behavioral17
Sample
mus_bad.ogg
Resource
win7-20231023-en
Behavioral task
behavioral18
Sample
mus_bad.ogg
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
mus_barrier.ogg
Resource
win7-20231020-en
Behavioral task
behavioral20
Sample
mus_barrier.ogg
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
mus_battle1.ogg
Resource
win7-20231020-en
Behavioral task
behavioral22
Sample
mus_battle1.ogg
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
mus_battle2.ogg
Resource
win7-20231023-en
Behavioral task
behavioral24
Sample
mus_battle2.ogg
Resource
win10v2004-20231020-en
Behavioral task
behavioral25
Sample
mus_bergentruckung.ogg
Resource
win7-20231023-en
Behavioral task
behavioral26
Sample
mus_bergentruckung.ogg
Resource
win10v2004-20231020-en
Behavioral task
behavioral27
Sample
mus_bgflameA.ogg
Resource
win7-20231023-en
Behavioral task
behavioral28
Sample
mus_bgflameA.ogg
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
mus_birdnoise.ogg
Resource
win7-20231023-en
Behavioral task
behavioral30
Sample
mus_birdnoise.ogg
Resource
win10v2004-20231025-en
Behavioral task
behavioral31
Sample
mus_birdsong.ogg
Resource
win7-20231025-en
Behavioral task
behavioral32
Sample
mus_birdsong.ogg
Resource
win10v2004-20231020-en
General
-
Target
mus_a2.ogg
-
Size
186KB
-
MD5
ee6282e61da71efdd1da75676044c0a1
-
SHA1
6caffe6d1838fb16138ed30f1f89890ac7e5df5b
-
SHA256
244ca709fe88618b2ae34a2767bdea7ea6b79df4f795b5f4fc00eab3c03e2ba7
-
SHA512
3f81d07e73c0dbda25c3af2440bcf1e25e1dcb568fd1c2d337d615ee833179053f5e7983048dd5db258a0116604abc27ee3919397939e3dad95c23ae0b983cec
-
SSDEEP
3072:aC7TTJRfpZ+Y1ZKJcawzcGvyNNoM9XAAnan0qEPqs39UXk4cM3gIL+7wDBHk/:LdRxZ+YKJcawzcNl9X7Ys3mUxIayBHk/
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2784 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2784 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2784 vlc.exe Token: SeIncBasePriorityPrivilege 2784 vlc.exe -
Suspicious use of FindShellTrayWindow 8 IoCs
pid Process 2784 vlc.exe 2784 vlc.exe 2784 vlc.exe 2784 vlc.exe 2784 vlc.exe 2784 vlc.exe 2784 vlc.exe 2784 vlc.exe -
Suspicious use of SendNotifyMessage 7 IoCs
pid Process 2784 vlc.exe 2784 vlc.exe 2784 vlc.exe 2784 vlc.exe 2784 vlc.exe 2784 vlc.exe 2784 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2784 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\mus_a2.ogg"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2784