6677437ae63257d73f77e7ee3d16bcec0e8ee6900ac72510bc203e4df2d8f334

Analysis

max time kernel
141s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/01/2024, 17:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

01 NOTIFICACION DEMANDA/breakage.ogg
Size

91KB
MD5

25ceb30a246b5e35393c3014a8458610
SHA1

30d174a20e735cd86458be23017a5e09ce46e85d
SHA256

23df8661729e5cd150bc5821f3a3d57d918332c4e34cca70eec6495fcb5582d1
SHA512

fe80bd336b87818c0e4091ad5d8c0c2a3ec167840072ead2c7533b20318360bc85b71d5b943973fb11018889e06c51042e0ecf7fe903f08487597e93970338ba
SSDEEP

1536:OUXBvEmQP+ps/USDEW6JA47CgxQqQraU54mR1DQ+XXJGswHw:VvEmQP+pBCElK47CM5Y954h+JGswHw

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2060	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2060	vlc.exe

Suspicious use of FindShellTrayWindow 8 IoCs

pid	Process
2060	vlc.exe
2060	vlc.exe
2060	vlc.exe
2060	vlc.exe
2060	vlc.exe
2060	vlc.exe
2060	vlc.exe
2060	vlc.exe

Suspicious use of SendNotifyMessage 7 IoCs

pid	Process
2060	vlc.exe
2060	vlc.exe
2060	vlc.exe
2060	vlc.exe
2060	vlc.exe
2060	vlc.exe
2060	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2060	vlc.exe

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\01 NOTIFICACION DEMANDA\breakage.ogg"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2060-5-0x000000013FCF0000-0x000000013FDE8000-memory.dmp

Filesize
992KB

Download
memory/2060-6-0x000007FEF8030000-0x000007FEF8064000-memory.dmp

Filesize
208KB

Download
memory/2060-7-0x000007FEF6690000-0x000007FEF6944000-memory.dmp

Filesize
2.7MB

Download
memory/2060-8-0x000007FEFBE20000-0x000007FEFBE38000-memory.dmp

Filesize
96KB

Download
memory/2060-9-0x000007FEF8180000-0x000007FEF8197000-memory.dmp

Filesize
92KB

Download
memory/2060-10-0x000007FEF8080000-0x000007FEF8091000-memory.dmp

Filesize
68KB

Download
memory/2060-11-0x000007FEF7360000-0x000007FEF7377000-memory.dmp

Filesize
92KB

Download
memory/2060-12-0x000007FEF7340000-0x000007FEF7351000-memory.dmp

Filesize
68KB

Download
memory/2060-13-0x000007FEF7320000-0x000007FEF733D000-memory.dmp

Filesize
116KB

Download
memory/2060-14-0x000007FEF6E40000-0x000007FEF6E51000-memory.dmp

Filesize
68KB

Download
memory/2060-15-0x000007FEF6490000-0x000007FEF6690000-memory.dmp

Filesize
2.0MB

Download
memory/2060-17-0x000007FEF6D60000-0x000007FEF6D81000-memory.dmp

Filesize
132KB

Download
memory/2060-16-0x000007FEF6D90000-0x000007FEF6DCF000-memory.dmp

Filesize
252KB

Download
memory/2060-18-0x000007FEF53E0000-0x000007FEF648B000-memory.dmp

Filesize
16.7MB

Download
memory/2060-19-0x000007FEF6D40000-0x000007FEF6D58000-memory.dmp

Filesize
96KB

Download
memory/2060-20-0x000007FEF6D20000-0x000007FEF6D31000-memory.dmp

Filesize
68KB

Download
memory/2060-21-0x000007FEF6D00000-0x000007FEF6D11000-memory.dmp

Filesize
68KB

Download
memory/2060-23-0x000007FEF6CC0000-0x000007FEF6CDB000-memory.dmp

Filesize
108KB

Download
memory/2060-22-0x000007FEF6CE0000-0x000007FEF6CF1000-memory.dmp

Filesize
68KB

Download
memory/2060-24-0x000007FEF53C0000-0x000007FEF53D1000-memory.dmp

Filesize
68KB

Download
memory/2060-25-0x000007FEF53A0000-0x000007FEF53B8000-memory.dmp

Filesize
96KB

Download
memory/2060-26-0x000007FEF5370000-0x000007FEF53A0000-memory.dmp

Filesize
192KB

Download
memory/2060-27-0x000007FEF5300000-0x000007FEF5367000-memory.dmp

Filesize
412KB

Download
memory/2060-28-0x000007FEF5290000-0x000007FEF52FF000-memory.dmp

Filesize
444KB

Download
memory/2060-29-0x000007FEF5270000-0x000007FEF5281000-memory.dmp

Filesize
68KB

Download
memory/2060-30-0x000007FEF5210000-0x000007FEF526C000-memory.dmp

Filesize
368KB

Download
memory/2060-31-0x000007FEF51B0000-0x000007FEF5206000-memory.dmp

Filesize
344KB

Download
memory/2060-32-0x000007FEF5180000-0x000007FEF51A8000-memory.dmp

Filesize
160KB

Download
memory/2060-33-0x000007FEF5150000-0x000007FEF5174000-memory.dmp

Filesize
144KB

Download
memory/2060-34-0x000007FEF5130000-0x000007FEF5147000-memory.dmp

Filesize
92KB

Download
memory/2060-35-0x000007FEF5100000-0x000007FEF5123000-memory.dmp

Filesize
140KB

Download
memory/2060-36-0x000007FEF50E0000-0x000007FEF50F1000-memory.dmp

Filesize
68KB

Download
memory/2060-41-0x000007FEF4F10000-0x000007FEF504B000-memory.dmp

Filesize
1.2MB

Download
memory/2060-42-0x000007FEF4EE0000-0x000007FEF4F0C000-memory.dmp

Filesize
176KB

Download
memory/2060-40-0x000007FEF5050000-0x000007FEF5062000-memory.dmp

Filesize
72KB

Download
memory/2060-39-0x000007FEF5070000-0x000007FEF5083000-memory.dmp

Filesize
76KB

Download
memory/2060-38-0x000007FEF5090000-0x000007FEF50B1000-memory.dmp

Filesize
132KB

Download
memory/2060-43-0x000007FEF4D20000-0x000007FEF4ED2000-memory.dmp

Filesize
1.7MB

Download
memory/2060-37-0x000007FEF50C0000-0x000007FEF50D2000-memory.dmp

Filesize
72KB

Download
memory/2060-44-0x000007FEF4D00000-0x000007FEF4D11000-memory.dmp

Filesize
68KB

Download
memory/2060-45-0x000007FEF4C60000-0x000007FEF4CF7000-memory.dmp

Filesize
604KB

Download
memory/2060-46-0x000007FEF4C40000-0x000007FEF4C52000-memory.dmp

Filesize
72KB

Download
memory/2060-47-0x000007FEF4A00000-0x000007FEF4C31000-memory.dmp

Filesize
2.2MB

Download
memory/2060-48-0x000007FEF48E0000-0x000007FEF49F2000-memory.dmp

Filesize
1.1MB

Download
memory/2060-53-0x000007FEF47C0000-0x000007FEF47D1000-memory.dmp

Filesize
68KB

Download
memory/2060-56-0x000007FEF46E0000-0x000007FEF477F000-memory.dmp

Filesize
636KB

Download
memory/2060-55-0x000007FEF4780000-0x000007FEF4793000-memory.dmp

Filesize
76KB

Download
memory/2060-54-0x000007FEF47A0000-0x000007FEF47B2000-memory.dmp

Filesize
72KB

Download
memory/2060-57-0x000007FEF46C0000-0x000007FEF46D1000-memory.dmp

Filesize
68KB

Download
memory/2060-52-0x000007FEF47E0000-0x000007FEF4841000-memory.dmp

Filesize
388KB

Download
memory/2060-51-0x000007FEF4850000-0x000007FEF4861000-memory.dmp

Filesize
68KB

Download
memory/2060-50-0x000007FEF4870000-0x000007FEF4895000-memory.dmp

Filesize
148KB

Download
memory/2060-62-0x000007FEF4530000-0x000007FEF4542000-memory.dmp

Filesize
72KB

Download
memory/2060-61-0x000007FEF4550000-0x000007FEF4561000-memory.dmp

Filesize
68KB

Download
memory/2060-68-0x000007FEF4460000-0x000007FEF4471000-memory.dmp

Filesize
68KB

Download
memory/2060-67-0x000007FEF4480000-0x000007FEF4491000-memory.dmp

Filesize
68KB

Download
memory/2060-66-0x000007FEF44A0000-0x000007FEF44B2000-memory.dmp

Filesize
72KB

Download
memory/2060-65-0x000007FEF44C0000-0x000007FEF44E9000-memory.dmp

Filesize
164KB

Download
memory/2060-64-0x000007FEF44F0000-0x000007FEF4506000-memory.dmp

Filesize
88KB

Download
memory/2060-63-0x000007FEF4510000-0x000007FEF4528000-memory.dmp

Filesize
96KB

Download
memory/2060-60-0x000007FEF4570000-0x000007FEF4581000-memory.dmp

Filesize
68KB

Download
memory/2060-59-0x000007FEF4590000-0x000007FEF45A1000-memory.dmp

Filesize
68KB

Download
memory/2060-58-0x000007FEF45B0000-0x000007FEF46B2000-memory.dmp

Filesize
1.0MB

Download
memory/2060-49-0x000007FEF48A0000-0x000007FEF48D5000-memory.dmp

Filesize
212KB

Download