Analysis

  • max time kernel
    141s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/02/2024, 13:43

General

  • Target

    004a3ec09b6d4e210e4131dda31f4d67.wav

  • Size

    14.5MB

  • MD5

    004a3ec09b6d4e210e4131dda31f4d67

  • SHA1

    6fda878eb6a5f9a108ba4951e411df4e3e6045cb

  • SHA256

    de4cfb40f2fdf7bf3f89cfc5c434bd4ea7da797c853ed0860994b78f5107c071

  • SHA512

    6a1d7092420aa10af7abb6feee6830c1031b48a80a9c052e5580a1641d285ed7df2395c963392a79245b54e5e4e9a1bda8dbb856c9acc824a274e18e0d3edd35

  • SSDEEP

    393216:NXgdQVgBh1mqoDs1qRPGRJR0wuE8eimF/JNZmvJ5tBCQOKpjb9C5KZbnj0uT:tmpBeqEs1oP8JmwuFzm/JivJ4nus64u

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\004a3ec09b6d4e210e4131dda31f4d67.wav"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2384

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2384-5-0x000000013F0A0000-0x000000013F198000-memory.dmp

          Filesize

          992KB

        • memory/2384-6-0x000007FEFAB90000-0x000007FEFABC4000-memory.dmp

          Filesize

          208KB

        • memory/2384-7-0x000007FEF61E0000-0x000007FEF6494000-memory.dmp

          Filesize

          2.7MB

        • memory/2384-8-0x000007FEFBA00000-0x000007FEFBA18000-memory.dmp

          Filesize

          96KB

        • memory/2384-10-0x000007FEF7C60000-0x000007FEF7C71000-memory.dmp

          Filesize

          68KB

        • memory/2384-12-0x000007FEF7A20000-0x000007FEF7A31000-memory.dmp

          Filesize

          68KB

        • memory/2384-13-0x000007FEF7A00000-0x000007FEF7A1D000-memory.dmp

          Filesize

          116KB

        • memory/2384-11-0x000007FEF7A40000-0x000007FEF7A57000-memory.dmp

          Filesize

          92KB

        • memory/2384-14-0x000007FEF79E0000-0x000007FEF79F1000-memory.dmp

          Filesize

          68KB

        • memory/2384-9-0x000007FEFAD20000-0x000007FEFAD37000-memory.dmp

          Filesize

          92KB

        • memory/2384-15-0x000007FEF5FE0000-0x000007FEF61E0000-memory.dmp

          Filesize

          2.0MB

        • memory/2384-17-0x000007FEF79A0000-0x000007FEF79DF000-memory.dmp

          Filesize

          252KB

        • memory/2384-22-0x000007FEF73F0000-0x000007FEF7401000-memory.dmp

          Filesize

          68KB

        • memory/2384-26-0x000007FEF6DF0000-0x000007FEF6E20000-memory.dmp

          Filesize

          192KB

        • memory/2384-25-0x000007FEF6E20000-0x000007FEF6E38000-memory.dmp

          Filesize

          96KB

        • memory/2384-24-0x000007FEF6E40000-0x000007FEF6E51000-memory.dmp

          Filesize

          68KB

        • memory/2384-27-0x000007FEF6960000-0x000007FEF69C7000-memory.dmp

          Filesize

          412KB

        • memory/2384-29-0x000007FEF6890000-0x000007FEF68A1000-memory.dmp

          Filesize

          68KB

        • memory/2384-28-0x000007FEF68B0000-0x000007FEF691F000-memory.dmp

          Filesize

          444KB

        • memory/2384-23-0x000007FEF6E60000-0x000007FEF6E7B000-memory.dmp

          Filesize

          108KB

        • memory/2384-30-0x000007FEF6830000-0x000007FEF6886000-memory.dmp

          Filesize

          344KB

        • memory/2384-21-0x000007FEF7410000-0x000007FEF7421000-memory.dmp

          Filesize

          68KB

        • memory/2384-32-0x000007FEF4ED0000-0x000007FEF4EF4000-memory.dmp

          Filesize

          144KB

        • memory/2384-31-0x000007FEF4F00000-0x000007FEF4F28000-memory.dmp

          Filesize

          160KB

        • memory/2384-20-0x000007FEF7430000-0x000007FEF7441000-memory.dmp

          Filesize

          68KB

        • memory/2384-33-0x000007FEF6810000-0x000007FEF6827000-memory.dmp

          Filesize

          92KB

        • memory/2384-36-0x000007FEF4E60000-0x000007FEF4E72000-memory.dmp

          Filesize

          72KB

        • memory/2384-38-0x000007FEF4E10000-0x000007FEF4E23000-memory.dmp

          Filesize

          76KB

        • memory/2384-37-0x000007FEF4E30000-0x000007FEF4E51000-memory.dmp

          Filesize

          132KB

        • memory/2384-35-0x000007FEF4E80000-0x000007FEF4E91000-memory.dmp

          Filesize

          68KB

        • memory/2384-34-0x000007FEF4EA0000-0x000007FEF4EC3000-memory.dmp

          Filesize

          140KB

        • memory/2384-19-0x000007FEF7980000-0x000007FEF7998000-memory.dmp

          Filesize

          96KB

        • memory/2384-18-0x000007FEF7450000-0x000007FEF7471000-memory.dmp

          Filesize

          132KB

        • memory/2384-16-0x000007FEF4F30000-0x000007FEF5FDB000-memory.dmp

          Filesize

          16.7MB

        • memory/2384-39-0x000007FEF4C90000-0x000007FEF4E08000-memory.dmp

          Filesize

          1.5MB

        • memory/2384-40-0x000007FEF4C70000-0x000007FEF4C87000-memory.dmp

          Filesize

          92KB

        • memory/2384-42-0x000007FEF4C40000-0x000007FEF4C6F000-memory.dmp

          Filesize

          188KB

        • memory/2384-41-0x000007FEFAD10000-0x000007FEFAD20000-memory.dmp

          Filesize

          64KB

        • memory/2384-43-0x000007FEF4C20000-0x000007FEF4C31000-memory.dmp

          Filesize

          68KB

        • memory/2384-46-0x000007FEF4BA0000-0x000007FEF4BB1000-memory.dmp

          Filesize

          68KB

        • memory/2384-45-0x000007FEF4BE0000-0x000007FEF4BF5000-memory.dmp

          Filesize

          84KB

        • memory/2384-47-0x000007FEF4B80000-0x000007FEF4B92000-memory.dmp

          Filesize

          72KB

        • memory/2384-44-0x000007FEF4C00000-0x000007FEF4C16000-memory.dmp

          Filesize

          88KB

        • memory/2384-48-0x000007FEF4A00000-0x000007FEF4B7A000-memory.dmp

          Filesize

          1.5MB

        • memory/2384-49-0x000007FEF49E0000-0x000007FEF49F3000-memory.dmp

          Filesize

          76KB

        • memory/2384-51-0x000007FEF49A0000-0x000007FEF49B1000-memory.dmp

          Filesize

          68KB

        • memory/2384-50-0x000007FEF49C0000-0x000007FEF49D4000-memory.dmp

          Filesize

          80KB

        • memory/2384-53-0x000007FEF4960000-0x000007FEF4971000-memory.dmp

          Filesize

          68KB

        • memory/2384-52-0x000007FEF4980000-0x000007FEF4991000-memory.dmp

          Filesize

          68KB

        • memory/2384-54-0x000007FEF4940000-0x000007FEF4956000-memory.dmp

          Filesize

          88KB