Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231020-es
  • resource tags

    arch:x64arch:x86image:win7-20231020-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    07-11-2023 13:42

General

  • Target

    GF_4.ogg

  • Size

    9KB

  • MD5

    cfcad4b4504ddf5fcc5c0c0a60aefcd8

  • SHA1

    7bfbbb1b96ecc2179abac48969c0e0398023c80c

  • SHA256

    26248d26ffa420099cf8760509090149db23f948749621c2af42294790203235

  • SHA512

    834ba1f47eeb7ffe8cbbcb05bf89a92bdc8c0f7add5371bf394d6b45efa7d128564ef13e320d400011c141d97682d0f50168e8a13aede5a90c9b95cc4dc69574

  • SSDEEP

    192:X/ttxOIOWOKxCPs4OLg3/cLX1g/zrbdppyAJFOJ22QfjC:X/tDzCPtchozrBppfzYQbC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\GF_4.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2340-5-0x000000013F8F0000-0x000000013F9E8000-memory.dmp

    Filesize

    992KB

  • memory/2340-6-0x000007FEFB440000-0x000007FEFB474000-memory.dmp

    Filesize

    208KB

  • memory/2340-7-0x000007FEF6900000-0x000007FEF6BB4000-memory.dmp

    Filesize

    2.7MB

  • memory/2340-8-0x000007FEFC280000-0x000007FEFC298000-memory.dmp

    Filesize

    96KB

  • memory/2340-9-0x000007FEFB6B0000-0x000007FEFB6C7000-memory.dmp

    Filesize

    92KB

  • memory/2340-10-0x000007FEFB220000-0x000007FEFB231000-memory.dmp

    Filesize

    68KB

  • memory/2340-11-0x000007FEFB200000-0x000007FEFB217000-memory.dmp

    Filesize

    92KB

  • memory/2340-12-0x000007FEF82E0000-0x000007FEF82F1000-memory.dmp

    Filesize

    68KB

  • memory/2340-13-0x000007FEF72E0000-0x000007FEF72FD000-memory.dmp

    Filesize

    116KB

  • memory/2340-14-0x000007FEF72C0000-0x000007FEF72D1000-memory.dmp

    Filesize

    68KB

  • memory/2340-15-0x000007FEF6700000-0x000007FEF6900000-memory.dmp

    Filesize

    2.0MB

  • memory/2340-16-0x000007FEF7280000-0x000007FEF72BF000-memory.dmp

    Filesize

    252KB

  • memory/2340-17-0x000007FEF66D0000-0x000007FEF66F1000-memory.dmp

    Filesize

    132KB

  • memory/2340-18-0x000007FEF66B0000-0x000007FEF66C8000-memory.dmp

    Filesize

    96KB

  • memory/2340-19-0x000007FEF6690000-0x000007FEF66A1000-memory.dmp

    Filesize

    68KB

  • memory/2340-20-0x000007FEF6670000-0x000007FEF6681000-memory.dmp

    Filesize

    68KB

  • memory/2340-21-0x000007FEF6650000-0x000007FEF6661000-memory.dmp

    Filesize

    68KB

  • memory/2340-22-0x000007FEF6630000-0x000007FEF664B000-memory.dmp

    Filesize

    108KB

  • memory/2340-23-0x000007FEF6610000-0x000007FEF6621000-memory.dmp

    Filesize

    68KB

  • memory/2340-24-0x000007FEF65F0000-0x000007FEF6608000-memory.dmp

    Filesize

    96KB

  • memory/2340-25-0x000007FEF65C0000-0x000007FEF65F0000-memory.dmp

    Filesize

    192KB

  • memory/2340-26-0x000007FEF5510000-0x000007FEF65BB000-memory.dmp

    Filesize

    16.7MB

  • memory/2340-27-0x000007FEF54A0000-0x000007FEF5507000-memory.dmp

    Filesize

    412KB

  • memory/2340-28-0x000007FEF5430000-0x000007FEF549F000-memory.dmp

    Filesize

    444KB

  • memory/2340-29-0x000007FEF5410000-0x000007FEF5421000-memory.dmp

    Filesize

    68KB

  • memory/2340-30-0x000007FEF53B0000-0x000007FEF540C000-memory.dmp

    Filesize

    368KB

  • memory/2340-31-0x000007FEF5230000-0x000007FEF53A8000-memory.dmp

    Filesize

    1.5MB

  • memory/2340-32-0x000007FEF5210000-0x000007FEF5227000-memory.dmp

    Filesize

    92KB

  • memory/2340-33-0x000007FEFB810000-0x000007FEFB820000-memory.dmp

    Filesize

    64KB

  • memory/2340-34-0x000007FEF51E0000-0x000007FEF520F000-memory.dmp

    Filesize

    188KB

  • memory/2340-35-0x000007FEF51C0000-0x000007FEF51D1000-memory.dmp

    Filesize

    68KB

  • memory/2340-36-0x000007FEF51A0000-0x000007FEF51B6000-memory.dmp

    Filesize

    88KB

  • memory/2340-37-0x000007FEF50D0000-0x000007FEF5195000-memory.dmp

    Filesize

    788KB

  • memory/2340-38-0x000007FEF50B0000-0x000007FEF50C5000-memory.dmp

    Filesize

    84KB

  • memory/2340-39-0x000007FEF5070000-0x000007FEF5081000-memory.dmp

    Filesize

    68KB

  • memory/2340-40-0x000007FEF5050000-0x000007FEF5062000-memory.dmp

    Filesize

    72KB

  • memory/2340-41-0x000007FEF4ED0000-0x000007FEF504A000-memory.dmp

    Filesize

    1.5MB

  • memory/2340-63-0x000007FEF5510000-0x000007FEF65BB000-memory.dmp

    Filesize

    16.7MB