Analysis
-
max time kernel
141s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
19/02/2024, 20:52
Static task
static1
Behavioral task
behavioral1
Sample
Dr. Yunyun.mp4
Resource
win7-20231215-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Dr. Yunyun.mp4
Resource
win10v2004-20231222-en
9 signatures
150 seconds
General
-
Target
Dr. Yunyun.mp4
-
Size
13.3MB
-
MD5
e3326b292ee52f7d0f0d83112ebae9a3
-
SHA1
94cbe7be5096425c9fbe7e786cab84a93f665a47
-
SHA256
ba7c2671892973c29ab6b797383b32545d3a9b0ad180364001ce1f426295f9a5
-
SHA512
7c133eee509cf4a35a8f9df94a114b4fdc104e8744d0696a6120f57afd1748c4f505c10610e0947c500e8241d5b213bea161cf1cfdb49939e8e177f2da37d5d4
-
SSDEEP
196608:3NDk0UxuTwy9JVayZB/sF2lpqAKtmOhV7JZe1uIg8KFDZoXcipoxCKchS4:3Bk4wcvGF2lKsOhV1ZZ5ZoXcuo0Q4
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1436 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1436 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 1436 vlc.exe Token: SeIncBasePriorityPrivilege 1436 vlc.exe -
Suspicious use of FindShellTrayWindow 28 IoCs
pid Process 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe 1436 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1436 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Dr. Yunyun.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1436