Analysis

  • max time kernel
    143s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/02/2024, 17:12

General

  • Target

    Undertale Yellow v1_1/mus/cafe.ogg

  • Size

    620KB

  • MD5

    af2d18691d1a3156df5b96f50e5bdf76

  • SHA1

    0f3dd15611d97a116e6a2c1f17f72497e1d9aa63

  • SHA256

    09006d75eddcf3833ac7366fff9bec0884be5f2eb986b8833fa64a861091a015

  • SHA512

    5cd3c9c68b81f6596024fbbba977c6f0c5658dd708652e4a7365347b46d382e6486da1859e246ba8b4fd2f2752e34e04dc50aece1e02f1296f36b9c8914204e9

  • SSDEEP

    12288:JZ3kSeyNWo6umZ7SR6NgqxkiLJc+4aBb3YGJpU/g9:JZDfNThySRTwyGL+u

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Undertale Yellow v1_1\mus\cafe.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2168-5-0x000000013FF20000-0x0000000140018000-memory.dmp

    Filesize

    992KB

  • memory/2168-6-0x000007FEFB590000-0x000007FEFB5C4000-memory.dmp

    Filesize

    208KB

  • memory/2168-7-0x000007FEF6590000-0x000007FEF6844000-memory.dmp

    Filesize

    2.7MB

  • memory/2168-9-0x000007FEFB850000-0x000007FEFB867000-memory.dmp

    Filesize

    92KB

  • memory/2168-11-0x000007FEFB210000-0x000007FEFB227000-memory.dmp

    Filesize

    92KB

  • memory/2168-13-0x000007FEF80D0000-0x000007FEF80ED000-memory.dmp

    Filesize

    116KB

  • memory/2168-14-0x000007FEF7EA0000-0x000007FEF7EB1000-memory.dmp

    Filesize

    68KB

  • memory/2168-12-0x000007FEFB1F0000-0x000007FEFB201000-memory.dmp

    Filesize

    68KB

  • memory/2168-10-0x000007FEFB4D0000-0x000007FEFB4E1000-memory.dmp

    Filesize

    68KB

  • memory/2168-8-0x000007FEFBE50000-0x000007FEFBE68000-memory.dmp

    Filesize

    96KB

  • memory/2168-15-0x000007FEF69F0000-0x000007FEF6BF0000-memory.dmp

    Filesize

    2.0MB

  • memory/2168-16-0x000007FEF54E0000-0x000007FEF658B000-memory.dmp

    Filesize

    16.7MB

  • memory/2168-17-0x000007FEF7E60000-0x000007FEF7E9F000-memory.dmp

    Filesize

    252KB

  • memory/2168-18-0x000007FEF7310000-0x000007FEF7331000-memory.dmp

    Filesize

    132KB

  • memory/2168-20-0x000007FEF72F0000-0x000007FEF7301000-memory.dmp

    Filesize

    68KB

  • memory/2168-22-0x000007FEF72B0000-0x000007FEF72C1000-memory.dmp

    Filesize

    68KB

  • memory/2168-23-0x000007FEF6CD0000-0x000007FEF6CEB000-memory.dmp

    Filesize

    108KB

  • memory/2168-24-0x000007FEF6CB0000-0x000007FEF6CC1000-memory.dmp

    Filesize

    68KB

  • memory/2168-26-0x000007FEF6C60000-0x000007FEF6C90000-memory.dmp

    Filesize

    192KB

  • memory/2168-27-0x000007FEF5470000-0x000007FEF54D7000-memory.dmp

    Filesize

    412KB

  • memory/2168-25-0x000007FEF6C90000-0x000007FEF6CA8000-memory.dmp

    Filesize

    96KB

  • memory/2168-21-0x000007FEF72D0000-0x000007FEF72E1000-memory.dmp

    Filesize

    68KB

  • memory/2168-19-0x000007FEF7E40000-0x000007FEF7E58000-memory.dmp

    Filesize

    96KB

  • memory/2168-28-0x000007FEF5400000-0x000007FEF546F000-memory.dmp

    Filesize

    444KB

  • memory/2168-29-0x000007FEF69D0000-0x000007FEF69E1000-memory.dmp

    Filesize

    68KB

  • memory/2168-30-0x000007FEF53A0000-0x000007FEF53FC000-memory.dmp

    Filesize

    368KB

  • memory/2168-33-0x000007FEFB900000-0x000007FEFB910000-memory.dmp

    Filesize

    64KB

  • memory/2168-32-0x000007FEF5200000-0x000007FEF5217000-memory.dmp

    Filesize

    92KB

  • memory/2168-34-0x000007FEF51D0000-0x000007FEF51FF000-memory.dmp

    Filesize

    188KB

  • memory/2168-31-0x000007FEF5220000-0x000007FEF5398000-memory.dmp

    Filesize

    1.5MB

  • memory/2168-35-0x000007FEF51B0000-0x000007FEF51C1000-memory.dmp

    Filesize

    68KB

  • memory/2168-36-0x000007FEF5190000-0x000007FEF51A6000-memory.dmp

    Filesize

    88KB

  • memory/2168-37-0x000007FEF50C0000-0x000007FEF5185000-memory.dmp

    Filesize

    788KB

  • memory/2168-38-0x000007FEF50A0000-0x000007FEF50B5000-memory.dmp

    Filesize

    84KB

  • memory/2168-39-0x000007FEF5080000-0x000007FEF5091000-memory.dmp

    Filesize

    68KB

  • memory/2168-40-0x000007FEF5040000-0x000007FEF5052000-memory.dmp

    Filesize

    72KB

  • memory/2168-41-0x000007FEF4EC0000-0x000007FEF503A000-memory.dmp

    Filesize

    1.5MB