Analysis
-
max time kernel
140s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
12-02-2024 21:20
Static task
static1
Behavioral task
behavioral1
Sample
x2mate.com - Dr. Feelgood (2021- Remaster) (128 kbps).mp3
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
x2mate.com - Dr. Feelgood (2021- Remaster) (128 kbps).mp3
Resource
win10v2004-20231215-en
General
-
Target
x2mate.com - Dr. Feelgood (2021- Remaster) (128 kbps).mp3
-
Size
2B
-
MD5
99914b932bd37a50b983c5e7c90ae93b
-
SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
-
SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
-
SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
vlc.exepid process 1616 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
vlc.exepid process 1616 vlc.exe -
Suspicious use of FindShellTrayWindow 8 IoCs
Processes:
vlc.exepid process 1616 vlc.exe 1616 vlc.exe 1616 vlc.exe 1616 vlc.exe 1616 vlc.exe 1616 vlc.exe 1616 vlc.exe 1616 vlc.exe -
Suspicious use of SendNotifyMessage 7 IoCs
Processes:
vlc.exepid process 1616 vlc.exe 1616 vlc.exe 1616 vlc.exe 1616 vlc.exe 1616 vlc.exe 1616 vlc.exe 1616 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
vlc.exepid process 1616 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\x2mate.com - Dr. Feelgood (2021- Remaster) (128 kbps).mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1616-6-0x000007FEFB1D0000-0x000007FEFB204000-memory.dmpFilesize
208KB
-
memory/1616-5-0x000000013FC70000-0x000000013FD68000-memory.dmpFilesize
992KB
-
memory/1616-7-0x000007FEF6290000-0x000007FEF6544000-memory.dmpFilesize
2.7MB
-
memory/1616-9-0x000007FEFB240000-0x000007FEFB257000-memory.dmpFilesize
92KB
-
memory/1616-8-0x000007FEFBA40000-0x000007FEFBA58000-memory.dmpFilesize
96KB
-
memory/1616-10-0x000007FEF7D20000-0x000007FEF7D31000-memory.dmpFilesize
68KB
-
memory/1616-11-0x000007FEF7D00000-0x000007FEF7D17000-memory.dmpFilesize
92KB
-
memory/1616-12-0x000007FEF7CE0000-0x000007FEF7CF1000-memory.dmpFilesize
68KB
-
memory/1616-13-0x000007FEF7B30000-0x000007FEF7B4D000-memory.dmpFilesize
116KB
-
memory/1616-14-0x000007FEF7B10000-0x000007FEF7B21000-memory.dmpFilesize
68KB
-
memory/1616-15-0x000007FEF51E0000-0x000007FEF628B000-memory.dmpFilesize
16.7MB
-
memory/1616-16-0x000007FEF6690000-0x000007FEF6890000-memory.dmpFilesize
2.0MB
-
memory/1616-17-0x000007FEF75D0000-0x000007FEF760F000-memory.dmpFilesize
252KB
-
memory/1616-18-0x000007FEF75A0000-0x000007FEF75C1000-memory.dmpFilesize
132KB
-
memory/1616-19-0x000007FEF7580000-0x000007FEF7598000-memory.dmpFilesize
96KB
-
memory/1616-20-0x000007FEF7560000-0x000007FEF7571000-memory.dmpFilesize
68KB
-
memory/1616-21-0x000007FEF6FF0000-0x000007FEF7001000-memory.dmpFilesize
68KB
-
memory/1616-22-0x000007FEF6FD0000-0x000007FEF6FE1000-memory.dmpFilesize
68KB
-
memory/1616-23-0x000007FEF6FB0000-0x000007FEF6FCB000-memory.dmpFilesize
108KB
-
memory/1616-24-0x000007FEF6F90000-0x000007FEF6FA1000-memory.dmpFilesize
68KB
-
memory/1616-25-0x000007FEF6B40000-0x000007FEF6B58000-memory.dmpFilesize
96KB
-
memory/1616-26-0x000007FEF6930000-0x000007FEF6960000-memory.dmpFilesize
192KB
-
memory/1616-27-0x000007FEF5170000-0x000007FEF51D7000-memory.dmpFilesize
412KB
-
memory/1616-28-0x000007FEF5100000-0x000007FEF516F000-memory.dmpFilesize
444KB
-
memory/1616-29-0x000007FEF6910000-0x000007FEF6921000-memory.dmpFilesize
68KB
-
memory/1616-30-0x000007FEF68F0000-0x000007FEF6907000-memory.dmpFilesize
92KB
-
memory/1616-31-0x000007FEF50A0000-0x000007FEF50F6000-memory.dmpFilesize
344KB
-
memory/1616-32-0x000007FEF5070000-0x000007FEF5098000-memory.dmpFilesize
160KB
-
memory/1616-33-0x000007FEF5040000-0x000007FEF5064000-memory.dmpFilesize
144KB
-
memory/1616-34-0x000007FEF5010000-0x000007FEF5033000-memory.dmpFilesize
140KB
-
memory/1616-35-0x000007FEF68D0000-0x000007FEF68E1000-memory.dmpFilesize
68KB
-
memory/1616-36-0x000007FEF4FF0000-0x000007FEF5002000-memory.dmpFilesize
72KB
-
memory/1616-37-0x000007FEF4FC0000-0x000007FEF4FE1000-memory.dmpFilesize
132KB
-
memory/1616-38-0x000007FEF4FA0000-0x000007FEF4FB3000-memory.dmpFilesize
76KB
-
memory/1616-39-0x000007FEF4F80000-0x000007FEF4F92000-memory.dmpFilesize
72KB
-
memory/1616-40-0x000007FEF4E40000-0x000007FEF4F7B000-memory.dmpFilesize
1.2MB
-
memory/1616-41-0x000007FEF4E10000-0x000007FEF4E3C000-memory.dmpFilesize
176KB
-
memory/1616-42-0x000007FEF4C50000-0x000007FEF4E02000-memory.dmpFilesize
1.7MB
-
memory/1616-43-0x000007FEF4BF0000-0x000007FEF4C4C000-memory.dmpFilesize
368KB
-
memory/1616-44-0x000007FEF4BD0000-0x000007FEF4BE1000-memory.dmpFilesize
68KB
-
memory/1616-45-0x000007FEF4B30000-0x000007FEF4BC7000-memory.dmpFilesize
604KB
-
memory/1616-46-0x000007FEF4B10000-0x000007FEF4B22000-memory.dmpFilesize
72KB
-
memory/1616-47-0x000007FEF48D0000-0x000007FEF4B01000-memory.dmpFilesize
2.2MB
-
memory/1616-48-0x000007FEF47B0000-0x000007FEF48C2000-memory.dmpFilesize
1.1MB
-
memory/1616-49-0x000007FEF4770000-0x000007FEF47A5000-memory.dmpFilesize
212KB
-
memory/1616-50-0x000007FEF4740000-0x000007FEF4765000-memory.dmpFilesize
148KB
-
memory/1616-51-0x000007FEF4720000-0x000007FEF4731000-memory.dmpFilesize
68KB
-
memory/1616-52-0x000007FEF46B0000-0x000007FEF4711000-memory.dmpFilesize
388KB
-
memory/1616-53-0x000007FEF4690000-0x000007FEF46A1000-memory.dmpFilesize
68KB
-
memory/1616-54-0x000007FEF4670000-0x000007FEF4682000-memory.dmpFilesize
72KB
-
memory/1616-55-0x000007FEF4650000-0x000007FEF4663000-memory.dmpFilesize
76KB
-
memory/1616-56-0x000007FEF45B0000-0x000007FEF464F000-memory.dmpFilesize
636KB
-
memory/1616-57-0x000007FEF4590000-0x000007FEF45A1000-memory.dmpFilesize
68KB
-
memory/1616-59-0x000007FEF4460000-0x000007FEF4471000-memory.dmpFilesize
68KB
-
memory/1616-58-0x000007FEF4480000-0x000007FEF4582000-memory.dmpFilesize
1.0MB
-
memory/1616-60-0x000007FEF4440000-0x000007FEF4451000-memory.dmpFilesize
68KB
-
memory/1616-61-0x000007FEF4420000-0x000007FEF4431000-memory.dmpFilesize
68KB
-
memory/1616-62-0x000007FEF4400000-0x000007FEF4412000-memory.dmpFilesize
72KB
-
memory/1616-63-0x000007FEF43E0000-0x000007FEF43F8000-memory.dmpFilesize
96KB
-
memory/1616-64-0x000007FEF43C0000-0x000007FEF43D6000-memory.dmpFilesize
88KB
-
memory/1616-65-0x000007FEF4390000-0x000007FEF43B9000-memory.dmpFilesize
164KB
-
memory/1616-66-0x000007FEF4370000-0x000007FEF4382000-memory.dmpFilesize
72KB
-
memory/1616-67-0x000007FEF4350000-0x000007FEF4361000-memory.dmpFilesize
68KB
-
memory/1616-68-0x000007FEF4330000-0x000007FEF4341000-memory.dmpFilesize
68KB