Analysis

  • max time kernel
    141s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/02/2024, 17:12

General

  • Target

    Undertale Yellow v1_1/mus/a_call_to_action.ogg

  • Size

    182KB

  • MD5

    e1dcebbf15f98a20ddd9ffad6f32d63b

  • SHA1

    1ed7fa547c2151d2c132cb8e11ff7fb99075a59d

  • SHA256

    b96d9c36bab4a6c9e3657673929bfebde8a2db25905e6c7b8b38df680367fc2c

  • SHA512

    d9c24679a10d6ab7916ed3df2907a0bda6cd9b6a0d4b5e0f1e0addc51b8b07f2e3e187b47209aafaf3381611a3b5f372fe752d98427ffa4b10e6c223df82c6d3

  • SSDEEP

    3072:3BEra2Id11mtU+0rco1Zxjjosxxn9iqzhXZ7gkBUb6uTbpRmh6FQZPzXW3zd:36a2Iv1MjoLxjM+n99lZ0oUWQyYQxDWx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Undertale Yellow v1_1\mus\a_call_to_action.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2924-6-0x000007FEF77A0000-0x000007FEF77D4000-memory.dmp

    Filesize

    208KB

  • memory/2924-5-0x000000013F290000-0x000000013F388000-memory.dmp

    Filesize

    992KB

  • memory/2924-7-0x000007FEF5DB0000-0x000007FEF6064000-memory.dmp

    Filesize

    2.7MB

  • memory/2924-16-0x000007FEF68D0000-0x000007FEF690F000-memory.dmp

    Filesize

    252KB

  • memory/2924-15-0x000007FEF5BB0000-0x000007FEF5DB0000-memory.dmp

    Filesize

    2.0MB

  • memory/2924-14-0x000007FEF6910000-0x000007FEF6921000-memory.dmp

    Filesize

    68KB

  • memory/2924-13-0x000007FEF6930000-0x000007FEF694D000-memory.dmp

    Filesize

    116KB

  • memory/2924-12-0x000007FEF74E0000-0x000007FEF74F1000-memory.dmp

    Filesize

    68KB

  • memory/2924-11-0x000007FEF7500000-0x000007FEF7517000-memory.dmp

    Filesize

    92KB

  • memory/2924-10-0x000007FEF7780000-0x000007FEF7791000-memory.dmp

    Filesize

    68KB

  • memory/2924-9-0x000007FEFA6E0000-0x000007FEFA6F7000-memory.dmp

    Filesize

    92KB

  • memory/2924-17-0x000007FEF4B00000-0x000007FEF5BAB000-memory.dmp

    Filesize

    16.7MB

  • memory/2924-18-0x000007FEF64C0000-0x000007FEF64E1000-memory.dmp

    Filesize

    132KB

  • memory/2924-26-0x000007FEF4AD0000-0x000007FEF4B00000-memory.dmp

    Filesize

    192KB

  • memory/2924-25-0x000007FEF63E0000-0x000007FEF63F8000-memory.dmp

    Filesize

    96KB

  • memory/2924-24-0x000007FEF6400000-0x000007FEF6411000-memory.dmp

    Filesize

    68KB

  • memory/2924-30-0x000007FEF4970000-0x000007FEF49CC000-memory.dmp

    Filesize

    368KB

  • memory/2924-29-0x000007FEF49D0000-0x000007FEF49E1000-memory.dmp

    Filesize

    68KB

  • memory/2924-28-0x000007FEF49F0000-0x000007FEF4A5F000-memory.dmp

    Filesize

    444KB

  • memory/2924-36-0x000007FEF4760000-0x000007FEF4776000-memory.dmp

    Filesize

    88KB

  • memory/2924-35-0x000007FEF4780000-0x000007FEF4791000-memory.dmp

    Filesize

    68KB

  • memory/2924-34-0x000007FEF47A0000-0x000007FEF47CF000-memory.dmp

    Filesize

    188KB

  • memory/2924-33-0x000007FEFA6D0000-0x000007FEFA6E0000-memory.dmp

    Filesize

    64KB

  • memory/2924-32-0x000007FEF47D0000-0x000007FEF47E7000-memory.dmp

    Filesize

    92KB

  • memory/2924-37-0x000007FEF4690000-0x000007FEF4755000-memory.dmp

    Filesize

    788KB

  • memory/2924-38-0x000007FEF4670000-0x000007FEF4685000-memory.dmp

    Filesize

    84KB

  • memory/2924-40-0x000007FEF4610000-0x000007FEF4622000-memory.dmp

    Filesize

    72KB

  • memory/2924-39-0x000007FEF4630000-0x000007FEF4641000-memory.dmp

    Filesize

    68KB

  • memory/2924-41-0x000007FEF4490000-0x000007FEF460A000-memory.dmp

    Filesize

    1.5MB

  • memory/2924-31-0x000007FEF47F0000-0x000007FEF4968000-memory.dmp

    Filesize

    1.5MB

  • memory/2924-27-0x000007FEF4A60000-0x000007FEF4AC7000-memory.dmp

    Filesize

    412KB

  • memory/2924-23-0x000007FEF6420000-0x000007FEF643B000-memory.dmp

    Filesize

    108KB

  • memory/2924-22-0x000007FEF6440000-0x000007FEF6451000-memory.dmp

    Filesize

    68KB

  • memory/2924-21-0x000007FEF6460000-0x000007FEF6471000-memory.dmp

    Filesize

    68KB

  • memory/2924-20-0x000007FEF6480000-0x000007FEF6491000-memory.dmp

    Filesize

    68KB

  • memory/2924-19-0x000007FEF64A0000-0x000007FEF64B8000-memory.dmp

    Filesize

    96KB

  • memory/2924-8-0x000007FEFBAA0000-0x000007FEFBAB8000-memory.dmp

    Filesize

    96KB