Analysis

  • max time kernel
    140s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12-02-2024 21:20

General

  • Target

    x2mate.com - Dr. Feelgood (2021- Remaster) (128 kbps).mp3

  • Size

    2B

  • MD5

    99914b932bd37a50b983c5e7c90ae93b

  • SHA1

    bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

  • SHA256

    44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

  • SHA512

    27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\x2mate.com - Dr. Feelgood (2021- Remaster) (128 kbps).mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1616-6-0x000007FEFB1D0000-0x000007FEFB204000-memory.dmp
    Filesize

    208KB

  • memory/1616-5-0x000000013FC70000-0x000000013FD68000-memory.dmp
    Filesize

    992KB

  • memory/1616-7-0x000007FEF6290000-0x000007FEF6544000-memory.dmp
    Filesize

    2.7MB

  • memory/1616-9-0x000007FEFB240000-0x000007FEFB257000-memory.dmp
    Filesize

    92KB

  • memory/1616-8-0x000007FEFBA40000-0x000007FEFBA58000-memory.dmp
    Filesize

    96KB

  • memory/1616-10-0x000007FEF7D20000-0x000007FEF7D31000-memory.dmp
    Filesize

    68KB

  • memory/1616-11-0x000007FEF7D00000-0x000007FEF7D17000-memory.dmp
    Filesize

    92KB

  • memory/1616-12-0x000007FEF7CE0000-0x000007FEF7CF1000-memory.dmp
    Filesize

    68KB

  • memory/1616-13-0x000007FEF7B30000-0x000007FEF7B4D000-memory.dmp
    Filesize

    116KB

  • memory/1616-14-0x000007FEF7B10000-0x000007FEF7B21000-memory.dmp
    Filesize

    68KB

  • memory/1616-15-0x000007FEF51E0000-0x000007FEF628B000-memory.dmp
    Filesize

    16.7MB

  • memory/1616-16-0x000007FEF6690000-0x000007FEF6890000-memory.dmp
    Filesize

    2.0MB

  • memory/1616-17-0x000007FEF75D0000-0x000007FEF760F000-memory.dmp
    Filesize

    252KB

  • memory/1616-18-0x000007FEF75A0000-0x000007FEF75C1000-memory.dmp
    Filesize

    132KB

  • memory/1616-19-0x000007FEF7580000-0x000007FEF7598000-memory.dmp
    Filesize

    96KB

  • memory/1616-20-0x000007FEF7560000-0x000007FEF7571000-memory.dmp
    Filesize

    68KB

  • memory/1616-21-0x000007FEF6FF0000-0x000007FEF7001000-memory.dmp
    Filesize

    68KB

  • memory/1616-22-0x000007FEF6FD0000-0x000007FEF6FE1000-memory.dmp
    Filesize

    68KB

  • memory/1616-23-0x000007FEF6FB0000-0x000007FEF6FCB000-memory.dmp
    Filesize

    108KB

  • memory/1616-24-0x000007FEF6F90000-0x000007FEF6FA1000-memory.dmp
    Filesize

    68KB

  • memory/1616-25-0x000007FEF6B40000-0x000007FEF6B58000-memory.dmp
    Filesize

    96KB

  • memory/1616-26-0x000007FEF6930000-0x000007FEF6960000-memory.dmp
    Filesize

    192KB

  • memory/1616-27-0x000007FEF5170000-0x000007FEF51D7000-memory.dmp
    Filesize

    412KB

  • memory/1616-28-0x000007FEF5100000-0x000007FEF516F000-memory.dmp
    Filesize

    444KB

  • memory/1616-29-0x000007FEF6910000-0x000007FEF6921000-memory.dmp
    Filesize

    68KB

  • memory/1616-30-0x000007FEF68F0000-0x000007FEF6907000-memory.dmp
    Filesize

    92KB

  • memory/1616-31-0x000007FEF50A0000-0x000007FEF50F6000-memory.dmp
    Filesize

    344KB

  • memory/1616-32-0x000007FEF5070000-0x000007FEF5098000-memory.dmp
    Filesize

    160KB

  • memory/1616-33-0x000007FEF5040000-0x000007FEF5064000-memory.dmp
    Filesize

    144KB

  • memory/1616-34-0x000007FEF5010000-0x000007FEF5033000-memory.dmp
    Filesize

    140KB

  • memory/1616-35-0x000007FEF68D0000-0x000007FEF68E1000-memory.dmp
    Filesize

    68KB

  • memory/1616-36-0x000007FEF4FF0000-0x000007FEF5002000-memory.dmp
    Filesize

    72KB

  • memory/1616-37-0x000007FEF4FC0000-0x000007FEF4FE1000-memory.dmp
    Filesize

    132KB

  • memory/1616-38-0x000007FEF4FA0000-0x000007FEF4FB3000-memory.dmp
    Filesize

    76KB

  • memory/1616-39-0x000007FEF4F80000-0x000007FEF4F92000-memory.dmp
    Filesize

    72KB

  • memory/1616-40-0x000007FEF4E40000-0x000007FEF4F7B000-memory.dmp
    Filesize

    1.2MB

  • memory/1616-41-0x000007FEF4E10000-0x000007FEF4E3C000-memory.dmp
    Filesize

    176KB

  • memory/1616-42-0x000007FEF4C50000-0x000007FEF4E02000-memory.dmp
    Filesize

    1.7MB

  • memory/1616-43-0x000007FEF4BF0000-0x000007FEF4C4C000-memory.dmp
    Filesize

    368KB

  • memory/1616-44-0x000007FEF4BD0000-0x000007FEF4BE1000-memory.dmp
    Filesize

    68KB

  • memory/1616-45-0x000007FEF4B30000-0x000007FEF4BC7000-memory.dmp
    Filesize

    604KB

  • memory/1616-46-0x000007FEF4B10000-0x000007FEF4B22000-memory.dmp
    Filesize

    72KB

  • memory/1616-47-0x000007FEF48D0000-0x000007FEF4B01000-memory.dmp
    Filesize

    2.2MB

  • memory/1616-48-0x000007FEF47B0000-0x000007FEF48C2000-memory.dmp
    Filesize

    1.1MB

  • memory/1616-49-0x000007FEF4770000-0x000007FEF47A5000-memory.dmp
    Filesize

    212KB

  • memory/1616-50-0x000007FEF4740000-0x000007FEF4765000-memory.dmp
    Filesize

    148KB

  • memory/1616-51-0x000007FEF4720000-0x000007FEF4731000-memory.dmp
    Filesize

    68KB

  • memory/1616-52-0x000007FEF46B0000-0x000007FEF4711000-memory.dmp
    Filesize

    388KB

  • memory/1616-53-0x000007FEF4690000-0x000007FEF46A1000-memory.dmp
    Filesize

    68KB

  • memory/1616-54-0x000007FEF4670000-0x000007FEF4682000-memory.dmp
    Filesize

    72KB

  • memory/1616-55-0x000007FEF4650000-0x000007FEF4663000-memory.dmp
    Filesize

    76KB

  • memory/1616-56-0x000007FEF45B0000-0x000007FEF464F000-memory.dmp
    Filesize

    636KB

  • memory/1616-57-0x000007FEF4590000-0x000007FEF45A1000-memory.dmp
    Filesize

    68KB

  • memory/1616-59-0x000007FEF4460000-0x000007FEF4471000-memory.dmp
    Filesize

    68KB

  • memory/1616-58-0x000007FEF4480000-0x000007FEF4582000-memory.dmp
    Filesize

    1.0MB

  • memory/1616-60-0x000007FEF4440000-0x000007FEF4451000-memory.dmp
    Filesize

    68KB

  • memory/1616-61-0x000007FEF4420000-0x000007FEF4431000-memory.dmp
    Filesize

    68KB

  • memory/1616-62-0x000007FEF4400000-0x000007FEF4412000-memory.dmp
    Filesize

    72KB

  • memory/1616-63-0x000007FEF43E0000-0x000007FEF43F8000-memory.dmp
    Filesize

    96KB

  • memory/1616-64-0x000007FEF43C0000-0x000007FEF43D6000-memory.dmp
    Filesize

    88KB

  • memory/1616-65-0x000007FEF4390000-0x000007FEF43B9000-memory.dmp
    Filesize

    164KB

  • memory/1616-66-0x000007FEF4370000-0x000007FEF4382000-memory.dmp
    Filesize

    72KB

  • memory/1616-67-0x000007FEF4350000-0x000007FEF4361000-memory.dmp
    Filesize

    68KB

  • memory/1616-68-0x000007FEF4330000-0x000007FEF4341000-memory.dmp
    Filesize

    68KB