Resubmissions

11/08/2024, 12:15

240811-pfbgvstblg 7

Analysis

  • max time kernel
    50s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 08:18

General

  • Target

    SMM_WE/bgm_smwclear_castle.ogg

  • Size

    90KB

  • MD5

    dcd4aa666c321cfbf6bd674e0af7079d

  • SHA1

    f2542178d03b16ecbb834a7c40db69f0b136097a

  • SHA256

    220449588651b37f2b5f844a6db2f538f815434ecce3b3dfdcb7e074b5ef004a

  • SHA512

    7aae4a9ba9af4b1f4f41bc266ccc25590d196bd102fbce97f2eb12eb41e27022da3fd40bb402d6ad69a620c5a048ba23cfc029977aad43ae26545b826c54fbbb

  • SSDEEP

    1536:GRoL86BHd69n+aMFE2B9Uat8daA1EQ+JTY4grXzuXEcjCYfl+rUEw9vqJnHno:7YMdg+aMFEwUat8db1H++z0ErYN+gEwR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\SMM_WE\bgm_smwclear_castle.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1904-6-0x000007FEF8010000-0x000007FEF8044000-memory.dmp

    Filesize

    208KB

  • memory/1904-5-0x000000013F500000-0x000000013F5F8000-memory.dmp

    Filesize

    992KB

  • memory/1904-12-0x000007FEF7E80000-0x000007FEF7E91000-memory.dmp

    Filesize

    68KB

  • memory/1904-14-0x000007FEF7E40000-0x000007FEF7E51000-memory.dmp

    Filesize

    68KB

  • memory/1904-7-0x000007FEF6380000-0x000007FEF6636000-memory.dmp

    Filesize

    2.7MB

  • memory/1904-13-0x000007FEF7E60000-0x000007FEF7E7D000-memory.dmp

    Filesize

    116KB

  • memory/1904-11-0x000007FEF7EA0000-0x000007FEF7EB7000-memory.dmp

    Filesize

    92KB

  • memory/1904-15-0x000007FEF6170000-0x000007FEF637B000-memory.dmp

    Filesize

    2.0MB

  • memory/1904-16-0x000007FEF7DF0000-0x000007FEF7E31000-memory.dmp

    Filesize

    260KB

  • memory/1904-10-0x000007FEF7EC0000-0x000007FEF7ED1000-memory.dmp

    Filesize

    68KB

  • memory/1904-9-0x000007FEFB7F0000-0x000007FEFB807000-memory.dmp

    Filesize

    92KB

  • memory/1904-8-0x000007FEFC130000-0x000007FEFC148000-memory.dmp

    Filesize

    96KB

  • memory/1904-27-0x000007FEF7280000-0x000007FEF72E7000-memory.dmp

    Filesize

    412KB

  • memory/1904-26-0x000007FEF72F0000-0x000007FEF7320000-memory.dmp

    Filesize

    192KB

  • memory/1904-25-0x000007FEF7320000-0x000007FEF7338000-memory.dmp

    Filesize

    96KB

  • memory/1904-30-0x000007FEF6A60000-0x000007FEF6ABC000-memory.dmp

    Filesize

    368KB

  • memory/1904-29-0x000007FEF71E0000-0x000007FEF71F1000-memory.dmp

    Filesize

    68KB

  • memory/1904-28-0x000007FEF7200000-0x000007FEF727C000-memory.dmp

    Filesize

    496KB

  • memory/1904-24-0x000007FEF7340000-0x000007FEF7351000-memory.dmp

    Filesize

    68KB

  • memory/1904-23-0x000007FEF7360000-0x000007FEF737B000-memory.dmp

    Filesize

    108KB

  • memory/1904-21-0x000007FEF7820000-0x000007FEF7831000-memory.dmp

    Filesize

    68KB

  • memory/1904-22-0x000007FEF7380000-0x000007FEF7391000-memory.dmp

    Filesize

    68KB

  • memory/1904-31-0x000007FEF4F40000-0x000007FEF50C0000-memory.dmp

    Filesize

    1.5MB

  • memory/1904-34-0x000007FEF6CC0000-0x000007FEF6CEF000-memory.dmp

    Filesize

    188KB

  • memory/1904-36-0x000007FEF6A20000-0x000007FEF6A36000-memory.dmp

    Filesize

    88KB

  • memory/1904-35-0x000007FEF6A40000-0x000007FEF6A51000-memory.dmp

    Filesize

    68KB

  • memory/1904-33-0x000007FEF7D70000-0x000007FEF7D80000-memory.dmp

    Filesize

    64KB

  • memory/1904-39-0x000007FEF4E50000-0x000007FEF4E62000-memory.dmp

    Filesize

    72KB

  • memory/1904-38-0x000007FEF69C0000-0x000007FEF69D1000-memory.dmp

    Filesize

    68KB

  • memory/1904-37-0x000007FEF4E70000-0x000007FEF4F35000-memory.dmp

    Filesize

    788KB

  • memory/1904-32-0x000007FEF6CF0000-0x000007FEF6D07000-memory.dmp

    Filesize

    92KB

  • memory/1904-20-0x000007FEF7D80000-0x000007FEF7D91000-memory.dmp

    Filesize

    68KB

  • memory/1904-45-0x000007FEF4C30000-0x000007FEF4C41000-memory.dmp

    Filesize

    68KB

  • memory/1904-44-0x000007FEF4C50000-0x000007FEF4C61000-memory.dmp

    Filesize

    68KB

  • memory/1904-43-0x000007FEF4C70000-0x000007FEF4C81000-memory.dmp

    Filesize

    68KB

  • memory/1904-42-0x000007FEF4C90000-0x000007FEF4CA4000-memory.dmp

    Filesize

    80KB

  • memory/1904-41-0x000007FEF4CB0000-0x000007FEF4CC3000-memory.dmp

    Filesize

    76KB

  • memory/1904-40-0x000007FEF4CD0000-0x000007FEF4E4A000-memory.dmp

    Filesize

    1.5MB

  • memory/1904-19-0x000007FEF7DA0000-0x000007FEF7DB8000-memory.dmp

    Filesize

    96KB

  • memory/1904-18-0x000007FEF7DC0000-0x000007FEF7DE1000-memory.dmp

    Filesize

    132KB

  • memory/1904-17-0x000007FEF50C0000-0x000007FEF6170000-memory.dmp

    Filesize

    16.7MB

  • memory/1904-48-0x000007FEF6380000-0x000007FEF6636000-memory.dmp

    Filesize

    2.7MB