Analysis
-
max time kernel
141s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
20-02-2024 07:40
Static task
static1
Behavioral task
behavioral1
Sample
audioclip-1708353147000-2786.mp3
Resource
win7-20231215-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
audioclip-1708353147000-2786.mp3
Resource
win10v2004-20231215-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
audioclip-1708353147000-2786.mp3
-
Size
23KB
-
MD5
135d5b2674f9f9e95a3e3be2529ef6af
-
SHA1
6ed71174f5f5811ba28382571437704ecf8f6547
-
SHA256
6a8d1d532ee60f4e6e7414416ad0badfaa2a8981df0a8bccb0e2811c9a80fc6b
-
SHA512
f3c18652d6d049cac159cc4929a3e6c58b2ad9d08cf3d2a1d329c57f828b1336ead27321d69165d9f5ddcd4f8c5a22a46c58a4b59594c782e32e0f521dc44bd0
-
SSDEEP
384:i8KKnjrNZlktxG5Ww1D3Kki5PLUchSkYebpyBqJlynQNHwyu13ve6W+LXy:3rUGYw1D3YhSk5b/JlPHwyu1fe6W+LXy
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2428 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2428 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2428 vlc.exe Token: SeIncBasePriorityPrivilege 2428 vlc.exe -
Suspicious use of FindShellTrayWindow 9 IoCs
pid Process 2428 vlc.exe 2428 vlc.exe 2428 vlc.exe 2428 vlc.exe 2428 vlc.exe 2428 vlc.exe 2428 vlc.exe 2428 vlc.exe 2428 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2428 vlc.exe 2428 vlc.exe 2428 vlc.exe 2428 vlc.exe 2428 vlc.exe 2428 vlc.exe 2428 vlc.exe 2428 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2428 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\audioclip-1708353147000-2786.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2428