Analysis
-
max time kernel
320s -
max time network
324s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25-02-2024 14:39
Static task
static1
Behavioral task
behavioral1
Sample
1029.mp4
Resource
win7-20240221-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
1029.mp4
Resource
win10v2004-20240221-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
1029.mp4
-
Size
2.8MB
-
MD5
d2da843bb0e800ed5ae4101033f10ac1
-
SHA1
9d04ae022ba07841f60670bc8f131327b4676d43
-
SHA256
8ba9d4a2568da3b4272eaf71d4b30946bd2d5b7569aa2376e62a4e3b6d887a48
-
SHA512
35d8522296e235982b22e68861fedebe6d34460928251d2c9cf0f120e2555c1fdd17b7bfecd59c1a6e20a4c0d9f1165ea7aa0eb330968633f2e00ecff102f72d
-
SSDEEP
49152:8CXUV+5tlgTSo/Q2MLQJxIjVfAglsNp0BjYkG0PSXtWTfV5BDZ:8CX9xZo/Q2MLQwVfpsD0BatAt5BDZ
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2928 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2928 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2928 vlc.exe Token: SeIncBasePriorityPrivilege 2928 vlc.exe -
Suspicious use of FindShellTrayWindow 28 IoCs
pid Process 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe 2928 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2928 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\1029.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2928