Resubmissions

11/08/2024, 12:15

240811-pfbgvstblg 7

Analysis

  • max time kernel
    51s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 08:18

General

  • Target

    SMM_WE/snd_DSM_4.ogg

  • Size

    105KB

  • MD5

    396696dd59ba24405aceaee563bf48bd

  • SHA1

    f797dc55018330408fc0fa5044584521c882fc20

  • SHA256

    e3459474503f4685a02504848fc17c3a50f25a21c0b671f2e2da42aff02d38ae

  • SHA512

    cd3accec3ae709d1122f03a279ce4a592611e5f530250ed7dbdce2801e592bac1d335b08d65fac0951d42b6c85fe2ad387d7d0b808e8792774d9b5812e65a4b0

  • SSDEEP

    3072:CKFNGSWitajA1Egd+DoCaqgO+U6el2mwo+b:HCSf2lgYkzqg/U6el25b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\SMM_WE\snd_DSM_4.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2848-6-0x000007FEF7B80000-0x000007FEF7BB4000-memory.dmp

    Filesize

    208KB

  • memory/2848-5-0x000000013FA20000-0x000000013FB18000-memory.dmp

    Filesize

    992KB

  • memory/2848-8-0x000007FEFBDC0000-0x000007FEFBDD8000-memory.dmp

    Filesize

    96KB

  • memory/2848-14-0x000007FEF6F70000-0x000007FEF6F81000-memory.dmp

    Filesize

    68KB

  • memory/2848-13-0x000007FEF7150000-0x000007FEF716D000-memory.dmp

    Filesize

    116KB

  • memory/2848-12-0x000007FEF7B40000-0x000007FEF7B51000-memory.dmp

    Filesize

    68KB

  • memory/2848-11-0x000007FEF7B60000-0x000007FEF7B77000-memory.dmp

    Filesize

    92KB

  • memory/2848-10-0x000007FEF7E20000-0x000007FEF7E31000-memory.dmp

    Filesize

    68KB

  • memory/2848-7-0x000007FEF6350000-0x000007FEF6606000-memory.dmp

    Filesize

    2.7MB

  • memory/2848-9-0x000007FEFAD40000-0x000007FEFAD57000-memory.dmp

    Filesize

    92KB

  • memory/2848-17-0x000007FEF6F20000-0x000007FEF6F61000-memory.dmp

    Filesize

    260KB

  • memory/2848-18-0x000007FEF6B60000-0x000007FEF6B81000-memory.dmp

    Filesize

    132KB

  • memory/2848-19-0x000007FEF6B40000-0x000007FEF6B58000-memory.dmp

    Filesize

    96KB

  • memory/2848-20-0x000007FEF6B20000-0x000007FEF6B31000-memory.dmp

    Filesize

    68KB

  • memory/2848-21-0x000007FEF6AC0000-0x000007FEF6AD1000-memory.dmp

    Filesize

    68KB

  • memory/2848-22-0x000007FEF6AA0000-0x000007FEF6AB1000-memory.dmp

    Filesize

    68KB

  • memory/2848-23-0x000007FEF6A80000-0x000007FEF6A9B000-memory.dmp

    Filesize

    108KB

  • memory/2848-24-0x000007FEF6A60000-0x000007FEF6A71000-memory.dmp

    Filesize

    68KB

  • memory/2848-25-0x000007FEF6A40000-0x000007FEF6A58000-memory.dmp

    Filesize

    96KB

  • memory/2848-26-0x000007FEF6A10000-0x000007FEF6A40000-memory.dmp

    Filesize

    192KB

  • memory/2848-27-0x000007FEF69A0000-0x000007FEF6A07000-memory.dmp

    Filesize

    412KB

  • memory/2848-28-0x000007FEF5010000-0x000007FEF508C000-memory.dmp

    Filesize

    496KB

  • memory/2848-29-0x000007FEF6980000-0x000007FEF6991000-memory.dmp

    Filesize

    68KB

  • memory/2848-30-0x000007FEF4FB0000-0x000007FEF500C000-memory.dmp

    Filesize

    368KB

  • memory/2848-16-0x000007FEF5090000-0x000007FEF529B000-memory.dmp

    Filesize

    2.0MB

  • memory/2848-31-0x000007FEF4E30000-0x000007FEF4FB0000-memory.dmp

    Filesize

    1.5MB

  • memory/2848-32-0x000007FEF4E10000-0x000007FEF4E27000-memory.dmp

    Filesize

    92KB

  • memory/2848-33-0x000007FEFAD30000-0x000007FEFAD40000-memory.dmp

    Filesize

    64KB

  • memory/2848-34-0x000007FEF4DE0000-0x000007FEF4E0F000-memory.dmp

    Filesize

    188KB

  • memory/2848-45-0x000007FEF4A30000-0x000007FEF4A41000-memory.dmp

    Filesize

    68KB

  • memory/2848-15-0x000007FEF52A0000-0x000007FEF6350000-memory.dmp

    Filesize

    16.7MB

  • memory/2848-40-0x000007FEF4AD0000-0x000007FEF4C4A000-memory.dmp

    Filesize

    1.5MB

  • memory/2848-44-0x000007FEF4A50000-0x000007FEF4A61000-memory.dmp

    Filesize

    68KB

  • memory/2848-43-0x000007FEF4A70000-0x000007FEF4A81000-memory.dmp

    Filesize

    68KB

  • memory/2848-42-0x000007FEF4A90000-0x000007FEF4AA4000-memory.dmp

    Filesize

    80KB

  • memory/2848-41-0x000007FEF4AB0000-0x000007FEF4AC3000-memory.dmp

    Filesize

    76KB

  • memory/2848-39-0x000007FEF4C50000-0x000007FEF4C62000-memory.dmp

    Filesize

    72KB

  • memory/2848-38-0x000007FEF4C70000-0x000007FEF4C81000-memory.dmp

    Filesize

    68KB

  • memory/2848-37-0x000007FEF4CD0000-0x000007FEF4D95000-memory.dmp

    Filesize

    788KB

  • memory/2848-36-0x000007FEF4DA0000-0x000007FEF4DB6000-memory.dmp

    Filesize

    88KB

  • memory/2848-35-0x000007FEF4DC0000-0x000007FEF4DD1000-memory.dmp

    Filesize

    68KB

  • memory/2848-48-0x000007FEF6350000-0x000007FEF6606000-memory.dmp

    Filesize

    2.7MB