Overview
overview
6Static
static
1Paper Mine...3).zip
windows7-x64
Paper Mine...3).zip
windows10-2004-x64
1001f3b1f9f...d1.png
windows7-x64
3001f3b1f9f...d1.png
windows10-2004-x64
3004a3ec09b...67.wav
windows7-x64
1004a3ec09b...67.wav
windows10-2004-x64
600595a684f...0c.png
windows7-x64
300595a684f...0c.png
windows10-2004-x64
300748ad27c...ae.png
windows7-x64
300748ad27c...ae.png
windows10-2004-x64
30087c701a7...46.png
windows7-x64
30087c701a7...46.png
windows10-2004-x64
300c8d052ef...b3.png
windows7-x64
300c8d052ef...b3.png
windows10-2004-x64
300c9bd5d56...c7.png
windows7-x64
300c9bd5d56...c7.png
windows10-2004-x64
300eca16b1d...01.png
windows7-x64
300eca16b1d...01.png
windows10-2004-x64
300f478caac...00.png
windows7-x64
300f478caac...00.png
windows10-2004-x64
300f61b9a88...a4.svg
windows7-x64
100f61b9a88...a4.svg
windows10-2004-x64
10107ace0d1...0d.wav
windows7-x64
10107ace0d1...0d.wav
windows10-2004-x64
60116030991...9f.svg
windows7-x64
10116030991...9f.svg
windows10-2004-x64
1012471aee1...db.png
windows7-x64
3012471aee1...db.png
windows10-2004-x64
30159f2faf7...6b.png
windows7-x64
30159f2faf7...6b.png
windows10-2004-x64
3016b66ed36...48.png
windows7-x64
3016b66ed36...48.png
windows10-2004-x64
3Analysis
-
max time kernel
141s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
20/02/2024, 13:43
Static task
static1
Behavioral task
behavioral1
Sample
Paper Minecraft 1.20 Update (V.23).zip
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Paper Minecraft 1.20 Update (V.23).zip
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
001f3b1f9f769f52223c2f882a07c6d1.png
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
001f3b1f9f769f52223c2f882a07c6d1.png
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
004a3ec09b6d4e210e4131dda31f4d67.wav
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
004a3ec09b6d4e210e4131dda31f4d67.wav
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
00595a684f2755c02d9dbb08f4c3110c.png
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
00595a684f2755c02d9dbb08f4c3110c.png
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
00748ad27cec5f574db952e8042951ae.png
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
00748ad27cec5f574db952e8042951ae.png
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
0087c701a70cc222e1806f5b03543b46.png
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
0087c701a70cc222e1806f5b03543b46.png
Resource
win10v2004-20240220-en
Behavioral task
behavioral13
Sample
00c8d052efcbd73b6abb75e93179fcb3.png
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
00c8d052efcbd73b6abb75e93179fcb3.png
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
00c9bd5d56fd8a90f8eb544ccac1d6c7.png
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
00c9bd5d56fd8a90f8eb544ccac1d6c7.png
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
00eca16b1d739ada50658c18cf6ff501.png
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
00eca16b1d739ada50658c18cf6ff501.png
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
00f478caaca448bb2739a47a82f94500.png
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
00f478caaca448bb2739a47a82f94500.png
Resource
win10v2004-20240220-en
Behavioral task
behavioral21
Sample
00f61b9a88ea6d63a6ff3f62f9e4c8a4.svg
Resource
win7-20240215-en
Behavioral task
behavioral22
Sample
00f61b9a88ea6d63a6ff3f62f9e4c8a4.svg
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
0107ace0d14b1383de7b9190a1abd40d.wav
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
0107ace0d14b1383de7b9190a1abd40d.wav
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
0116030991a5e2a4dc3aae538db90b9f.svg
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
0116030991a5e2a4dc3aae538db90b9f.svg
Resource
win10v2004-20240220-en
Behavioral task
behavioral27
Sample
012471aee1efd71cc29e531eaf4e78db.png
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
012471aee1efd71cc29e531eaf4e78db.png
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
0159f2faf7a82639cf5a910a41e1966b.png
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
0159f2faf7a82639cf5a910a41e1966b.png
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
016b66ed3607b501e6ab35de80ad7d48.png
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
016b66ed3607b501e6ab35de80ad7d48.png
Resource
win10v2004-20240220-en
General
-
Target
004a3ec09b6d4e210e4131dda31f4d67.wav
-
Size
14.5MB
-
MD5
004a3ec09b6d4e210e4131dda31f4d67
-
SHA1
6fda878eb6a5f9a108ba4951e411df4e3e6045cb
-
SHA256
de4cfb40f2fdf7bf3f89cfc5c434bd4ea7da797c853ed0860994b78f5107c071
-
SHA512
6a1d7092420aa10af7abb6feee6830c1031b48a80a9c052e5580a1641d285ed7df2395c963392a79245b54e5e4e9a1bda8dbb856c9acc824a274e18e0d3edd35
-
SSDEEP
393216:NXgdQVgBh1mqoDs1qRPGRJR0wuE8eimF/JNZmvJ5tBCQOKpjb9C5KZbnj0uT:tmpBeqEs1oP8JmwuFzm/JivJ4nus64u
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2384 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2384 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2384 vlc.exe Token: SeIncBasePriorityPrivilege 2384 vlc.exe -
Suspicious use of FindShellTrayWindow 5 IoCs
pid Process 2384 vlc.exe 2384 vlc.exe 2384 vlc.exe 2384 vlc.exe 2384 vlc.exe -
Suspicious use of SendNotifyMessage 4 IoCs
pid Process 2384 vlc.exe 2384 vlc.exe 2384 vlc.exe 2384 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2384 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\004a3ec09b6d4e210e4131dda31f4d67.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2384