Analysis

  • max time kernel
    140s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 10:52

General

  • Target

    videoplayback_1.mp4

  • Size

    273KB

  • MD5

    1e49b2a64f4ac31dd801fd4277659c21

  • SHA1

    ca339c02a0f3592ba595f38d6771d96eb7262651

  • SHA256

    dfaa43eb26c4563a27a32fb26b1837443b9bf467a75d5366b19a67cb6eb10522

  • SHA512

    de3ef6b33b09d0890c3694424dbc261a9e8bc7f286ccf6dfeb7965b9e9ac10f7a4ec6faf2d3cee2edf2f83b378b327f99e943ee4fd0795c88f0f432edb2b43a4

  • SSDEEP

    6144:+jICnr4A5acfXJdO853ThUBF7dhaKYoP6FpS0J2AOW:sZr4A5aGXJdv5jK/7uKyF40J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 27 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\videoplayback_1.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1364

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1364-5-0x000000013FFB0000-0x00000001400A8000-memory.dmp

          Filesize

          992KB

        • memory/1364-6-0x000007FEF7E60000-0x000007FEF7E94000-memory.dmp

          Filesize

          208KB

        • memory/1364-14-0x000007FEF72A0000-0x000007FEF72B1000-memory.dmp

          Filesize

          68KB

        • memory/1364-15-0x000007FEF6410000-0x000007FEF6610000-memory.dmp

          Filesize

          2.0MB

        • memory/1364-13-0x000007FEF72C0000-0x000007FEF72DD000-memory.dmp

          Filesize

          116KB

        • memory/1364-16-0x000007FEF5360000-0x000007FEF640B000-memory.dmp

          Filesize

          16.7MB

        • memory/1364-31-0x000007FEF5080000-0x000007FEF51F8000-memory.dmp

          Filesize

          1.5MB

        • memory/1364-36-0x000007FEF4E30000-0x000007FEF4E7C000-memory.dmp

          Filesize

          304KB

        • memory/1364-35-0x000007FEF4E80000-0x000007FEF4EC2000-memory.dmp

          Filesize

          264KB

        • memory/1364-39-0x000007FEF4A10000-0x000007FEF4C5B000-memory.dmp

          Filesize

          2.3MB

        • memory/1364-38-0x000007FEF4C60000-0x000007FEF4CB7000-memory.dmp

          Filesize

          348KB

        • memory/1364-37-0x000007FEF4CC0000-0x000007FEF4E2B000-memory.dmp

          Filesize

          1.4MB

        • memory/1364-46-0x000007FEF30A0000-0x000007FEF3115000-memory.dmp

          Filesize

          468KB

        • memory/1364-57-0x000007FEF2C40000-0x000007FEF2C51000-memory.dmp

          Filesize

          68KB

        • memory/1364-60-0x000007FEF29A0000-0x000007FEF2B1A000-memory.dmp

          Filesize

          1.5MB

        • memory/1364-59-0x000007FEF2B20000-0x000007FEF2B32000-memory.dmp

          Filesize

          72KB

        • memory/1364-68-0x000007FEF2890000-0x000007FEF28A2000-memory.dmp

          Filesize

          72KB

        • memory/1364-67-0x000007FEF28B0000-0x000007FEF28C4000-memory.dmp

          Filesize

          80KB

        • memory/1364-66-0x000007FEF28D0000-0x000007FEF28E3000-memory.dmp

          Filesize

          76KB

        • memory/1364-65-0x000007FEF28F0000-0x000007FEF2905000-memory.dmp

          Filesize

          84KB

        • memory/1364-64-0x000007FEF2910000-0x000007FEF2922000-memory.dmp

          Filesize

          72KB

        • memory/1364-63-0x000007FEF2930000-0x000007FEF294B000-memory.dmp

          Filesize

          108KB

        • memory/1364-62-0x000007FEF2950000-0x000007FEF2963000-memory.dmp

          Filesize

          76KB

        • memory/1364-61-0x000007FEF2970000-0x000007FEF299A000-memory.dmp

          Filesize

          168KB

        • memory/1364-58-0x000007FEF2B40000-0x000007FEF2C34000-memory.dmp

          Filesize

          976KB

        • memory/1364-56-0x000007FEF2C80000-0x000007FEF2C93000-memory.dmp

          Filesize

          76KB

        • memory/1364-55-0x000007FEF2CA0000-0x000007FEF2CC3000-memory.dmp

          Filesize

          140KB

        • memory/1364-54-0x000007FEF2CD0000-0x000007FEF2CE5000-memory.dmp

          Filesize

          84KB

        • memory/1364-53-0x000007FEF2CF0000-0x000007FEF2F0D000-memory.dmp

          Filesize

          2.1MB

        • memory/1364-52-0x000007FEF2F10000-0x000007FEF2F25000-memory.dmp

          Filesize

          84KB

        • memory/1364-51-0x000007FEF2F30000-0x000007FEF2F80000-memory.dmp

          Filesize

          320KB

        • memory/1364-50-0x000007FEF2F80000-0x000007FEF2F94000-memory.dmp

          Filesize

          80KB

        • memory/1364-49-0x000007FEF2FA0000-0x000007FEF2FB3000-memory.dmp

          Filesize

          76KB

        • memory/1364-48-0x000007FEF2FC0000-0x000007FEF302D000-memory.dmp

          Filesize

          436KB

        • memory/1364-47-0x000007FEF3030000-0x000007FEF3092000-memory.dmp

          Filesize

          392KB

        • memory/1364-45-0x000007FEF3120000-0x000007FEF31E5000-memory.dmp

          Filesize

          788KB

        • memory/1364-44-0x000007FEF31F0000-0x000007FEF3206000-memory.dmp

          Filesize

          88KB

        • memory/1364-43-0x000007FEF3210000-0x000007FEF3221000-memory.dmp

          Filesize

          68KB

        • memory/1364-42-0x000007FEF3230000-0x000007FEF325F000-memory.dmp

          Filesize

          188KB

        • memory/1364-41-0x000007FEF7EC0000-0x000007FEF7ED0000-memory.dmp

          Filesize

          64KB

        • memory/1364-40-0x000007FEF3260000-0x000007FEF4A10000-memory.dmp

          Filesize

          23.7MB

        • memory/1364-34-0x000007FEF4ED0000-0x000007FEF4EE2000-memory.dmp

          Filesize

          72KB

        • memory/1364-33-0x000007FEF4EF0000-0x000007FEF5060000-memory.dmp

          Filesize

          1.4MB

        • memory/1364-32-0x000007FEF5060000-0x000007FEF5077000-memory.dmp

          Filesize

          92KB

        • memory/1364-30-0x000007FEF5200000-0x000007FEF5256000-memory.dmp

          Filesize

          344KB

        • memory/1364-29-0x000007FEF5260000-0x000007FEF5271000-memory.dmp

          Filesize

          68KB

        • memory/1364-28-0x000007FEF5280000-0x000007FEF52EF000-memory.dmp

          Filesize

          444KB

        • memory/1364-27-0x000007FEF52F0000-0x000007FEF5357000-memory.dmp

          Filesize

          412KB

        • memory/1364-26-0x000007FEF6C40000-0x000007FEF6C70000-memory.dmp

          Filesize

          192KB

        • memory/1364-25-0x000007FEF6C70000-0x000007FEF6C88000-memory.dmp

          Filesize

          96KB

        • memory/1364-24-0x000007FEF6C90000-0x000007FEF6CA1000-memory.dmp

          Filesize

          68KB

        • memory/1364-23-0x000007FEF6CB0000-0x000007FEF6CCB000-memory.dmp

          Filesize

          108KB

        • memory/1364-22-0x000007FEF6CD0000-0x000007FEF6CE1000-memory.dmp

          Filesize

          68KB

        • memory/1364-21-0x000007FEF6CF0000-0x000007FEF6D01000-memory.dmp

          Filesize

          68KB

        • memory/1364-20-0x000007FEF6D10000-0x000007FEF6D21000-memory.dmp

          Filesize

          68KB

        • memory/1364-19-0x000007FEF6D30000-0x000007FEF6D48000-memory.dmp

          Filesize

          96KB

        • memory/1364-18-0x000007FEF6E00000-0x000007FEF6E21000-memory.dmp

          Filesize

          132KB

        • memory/1364-17-0x000007FEF6E30000-0x000007FEF6E6F000-memory.dmp

          Filesize

          252KB

        • memory/1364-12-0x000007FEF72E0000-0x000007FEF72F1000-memory.dmp

          Filesize

          68KB

        • memory/1364-11-0x000007FEF7300000-0x000007FEF7317000-memory.dmp

          Filesize

          92KB

        • memory/1364-10-0x000007FEF7E20000-0x000007FEF7E31000-memory.dmp

          Filesize

          68KB

        • memory/1364-9-0x000007FEF7ED0000-0x000007FEF7EE7000-memory.dmp

          Filesize

          92KB

        • memory/1364-8-0x000007FEFC230000-0x000007FEFC248000-memory.dmp

          Filesize

          96KB

        • memory/1364-7-0x000007FEF6610000-0x000007FEF68C4000-memory.dmp

          Filesize

          2.7MB