Analysis

  • max time kernel
    141s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 05:26

General

  • Target

    10003039.ogg

  • Size

    3.6MB

  • MD5

    cf570952b3c8e1da44ed0e7bc9cffe10

  • SHA1

    e8dea1e5a5188efc91cb7ad461d0652a02cd8891

  • SHA256

    702b1e2507d54c314fe31c9d5dad7ba232647dc6e394b0225a0c4f90ac1888dd

  • SHA512

    db3f62c79e178f181429192a44640179800b82410689bb21d473912879d41919897bebe7c1ee787d7a9e1f8b4302690fcbac570407f4377473733b640ab022ac

  • SSDEEP

    98304:8mCBKitqrmSuAW8P8+iv/62BuFrp80wPoS/y/ni/Q5Su:8mbit0mdf+iv/fIJgh/y/i/W

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 28 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\10003039.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2868-5-0x000000013FBF0000-0x000000013FCE8000-memory.dmp

    Filesize

    992KB

  • memory/2868-6-0x000007FEF7120000-0x000007FEF7154000-memory.dmp

    Filesize

    208KB

  • memory/2868-9-0x000007FEF7B20000-0x000007FEF7B37000-memory.dmp

    Filesize

    92KB

  • memory/2868-7-0x000007FEF5AD0000-0x000007FEF5D84000-memory.dmp

    Filesize

    2.7MB

  • memory/2868-8-0x000007FEF7EC0000-0x000007FEF7ED8000-memory.dmp

    Filesize

    96KB

  • memory/2868-10-0x000007FEF6C40000-0x000007FEF6C51000-memory.dmp

    Filesize

    68KB

  • memory/2868-12-0x000007FEF6B90000-0x000007FEF6BA1000-memory.dmp

    Filesize

    68KB

  • memory/2868-14-0x000007FEF6B50000-0x000007FEF6B61000-memory.dmp

    Filesize

    68KB

  • memory/2868-13-0x000007FEF6B70000-0x000007FEF6B8D000-memory.dmp

    Filesize

    116KB

  • memory/2868-11-0x000007FEF6BB0000-0x000007FEF6BC7000-memory.dmp

    Filesize

    92KB

  • memory/2868-15-0x000007FEF48F0000-0x000007FEF599B000-memory.dmp

    Filesize

    16.7MB

  • memory/2868-16-0x000007FEF46F0000-0x000007FEF48F0000-memory.dmp

    Filesize

    2.0MB

  • memory/2868-19-0x000007FEF6AC0000-0x000007FEF6AD8000-memory.dmp

    Filesize

    96KB

  • memory/2868-31-0x000007FEF4440000-0x000007FEF4496000-memory.dmp

    Filesize

    344KB

  • memory/2868-30-0x000007FEF44A0000-0x000007FEF44FC000-memory.dmp

    Filesize

    368KB

  • memory/2868-33-0x000007FEF42A0000-0x000007FEF42B7000-memory.dmp

    Filesize

    92KB

  • memory/2868-37-0x000007FEF4070000-0x000007FEF40BC000-memory.dmp

    Filesize

    304KB

  • memory/2868-36-0x000007FEF40C0000-0x000007FEF4102000-memory.dmp

    Filesize

    264KB

  • memory/2868-39-0x000007FEF3EA0000-0x000007FEF3EF7000-memory.dmp

    Filesize

    348KB

  • memory/2868-40-0x000007FEF3C50000-0x000007FEF3E9B000-memory.dmp

    Filesize

    2.3MB

  • memory/2868-38-0x000007FEF3F00000-0x000007FEF406B000-memory.dmp

    Filesize

    1.4MB

  • memory/2868-35-0x000007FEF4110000-0x000007FEF4122000-memory.dmp

    Filesize

    72KB

  • memory/2868-34-0x000007FEF4130000-0x000007FEF42A0000-memory.dmp

    Filesize

    1.4MB

  • memory/2868-32-0x000007FEF42C0000-0x000007FEF4438000-memory.dmp

    Filesize

    1.5MB

  • memory/2868-29-0x000007FEF4500000-0x000007FEF4511000-memory.dmp

    Filesize

    68KB

  • memory/2868-28-0x000007FEF4520000-0x000007FEF458F000-memory.dmp

    Filesize

    444KB

  • memory/2868-47-0x000007FEF22E0000-0x000007FEF2355000-memory.dmp

    Filesize

    468KB

  • memory/2868-53-0x000007FEF2150000-0x000007FEF2165000-memory.dmp

    Filesize

    84KB

  • memory/2868-56-0x000007FEF20F0000-0x000007FEF2102000-memory.dmp

    Filesize

    72KB

  • memory/2868-55-0x000007FEF2110000-0x000007FEF2121000-memory.dmp

    Filesize

    68KB

  • memory/2868-58-0x000007FEF20D0000-0x000007FEF20E5000-memory.dmp

    Filesize

    84KB

  • memory/2868-60-0x000007FEF2080000-0x000007FEF2093000-memory.dmp

    Filesize

    76KB

  • memory/2868-67-0x000007FEF0450000-0x000007FEF0463000-memory.dmp

    Filesize

    76KB

  • memory/2868-66-0x000007FEF0470000-0x000007FEF0485000-memory.dmp

    Filesize

    84KB

  • memory/2868-68-0x000007FEF0430000-0x000007FEF0444000-memory.dmp

    Filesize

    80KB

  • memory/2868-65-0x000007FEF0490000-0x000007FEF04A2000-memory.dmp

    Filesize

    72KB

  • memory/2868-64-0x000007FEF1C80000-0x000007FEF1C9B000-memory.dmp

    Filesize

    108KB

  • memory/2868-63-0x000007FEF2030000-0x000007FEF2043000-memory.dmp

    Filesize

    76KB

  • memory/2868-62-0x000007FEF2050000-0x000007FEF207A000-memory.dmp

    Filesize

    168KB

  • memory/2868-61-0x000007FEF1CA0000-0x000007FEF1D94000-memory.dmp

    Filesize

    976KB

  • memory/2868-59-0x000007FEF20A0000-0x000007FEF20C3000-memory.dmp

    Filesize

    140KB

  • memory/2868-57-0x000007FEEFBC0000-0x000007FEEFD3A000-memory.dmp

    Filesize

    1.5MB

  • memory/2868-54-0x000007FEF0050000-0x000007FEF026D000-memory.dmp

    Filesize

    2.1MB

  • memory/2868-52-0x000007FEF2170000-0x000007FEF21C0000-memory.dmp

    Filesize

    320KB

  • memory/2868-51-0x000007FEF21C0000-0x000007FEF21D4000-memory.dmp

    Filesize

    80KB

  • memory/2868-50-0x000007FEF21E0000-0x000007FEF21F3000-memory.dmp

    Filesize

    76KB

  • memory/2868-49-0x000007FEF2200000-0x000007FEF226D000-memory.dmp

    Filesize

    436KB

  • memory/2868-48-0x000007FEF2270000-0x000007FEF22D2000-memory.dmp

    Filesize

    392KB

  • memory/2868-46-0x000007FEF2360000-0x000007FEF2425000-memory.dmp

    Filesize

    788KB

  • memory/2868-45-0x000007FEF2430000-0x000007FEF2446000-memory.dmp

    Filesize

    88KB

  • memory/2868-44-0x000007FEF2450000-0x000007FEF2461000-memory.dmp

    Filesize

    68KB

  • memory/2868-43-0x000007FEF2470000-0x000007FEF249F000-memory.dmp

    Filesize

    188KB

  • memory/2868-42-0x000007FEF7F20000-0x000007FEF7F30000-memory.dmp

    Filesize

    64KB

  • memory/2868-41-0x000007FEF24A0000-0x000007FEF3C50000-memory.dmp

    Filesize

    23.7MB

  • memory/2868-27-0x000007FEF4590000-0x000007FEF45F7000-memory.dmp

    Filesize

    412KB

  • memory/2868-26-0x000007FEF4600000-0x000007FEF4630000-memory.dmp

    Filesize

    192KB

  • memory/2868-25-0x000007FEF4630000-0x000007FEF4648000-memory.dmp

    Filesize

    96KB

  • memory/2868-24-0x000007FEF4650000-0x000007FEF4661000-memory.dmp

    Filesize

    68KB

  • memory/2868-23-0x000007FEF4670000-0x000007FEF468B000-memory.dmp

    Filesize

    108KB

  • memory/2868-22-0x000007FEF4690000-0x000007FEF46A1000-memory.dmp

    Filesize

    68KB

  • memory/2868-21-0x000007FEF46B0000-0x000007FEF46C1000-memory.dmp

    Filesize

    68KB

  • memory/2868-20-0x000007FEF46D0000-0x000007FEF46E1000-memory.dmp

    Filesize

    68KB

  • memory/2868-18-0x000007FEF6AE0000-0x000007FEF6B01000-memory.dmp

    Filesize

    132KB

  • memory/2868-17-0x000007FEF6B10000-0x000007FEF6B4F000-memory.dmp

    Filesize

    252KB