Analysis

  • max time kernel
    320s
  • max time network
    324s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25-02-2024 14:39

General

  • Target

    1029.mp4

  • Size

    2.8MB

  • MD5

    d2da843bb0e800ed5ae4101033f10ac1

  • SHA1

    9d04ae022ba07841f60670bc8f131327b4676d43

  • SHA256

    8ba9d4a2568da3b4272eaf71d4b30946bd2d5b7569aa2376e62a4e3b6d887a48

  • SHA512

    35d8522296e235982b22e68861fedebe6d34460928251d2c9cf0f120e2555c1fdd17b7bfecd59c1a6e20a4c0d9f1165ea7aa0eb330968633f2e00ecff102f72d

  • SSDEEP

    49152:8CXUV+5tlgTSo/Q2MLQJxIjVfAglsNp0BjYkG0PSXtWTfV5BDZ:8CX9xZo/Q2MLQwVfpsD0BatAt5BDZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 28 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\1029.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2928-5-0x000000013FD30000-0x000000013FE28000-memory.dmp

    Filesize

    992KB

  • memory/2928-6-0x000007FEFB4D0000-0x000007FEFB504000-memory.dmp

    Filesize

    208KB

  • memory/2928-8-0x000007FEFBFB0000-0x000007FEFBFC8000-memory.dmp

    Filesize

    96KB

  • memory/2928-10-0x000007FEFB490000-0x000007FEFB4A1000-memory.dmp

    Filesize

    68KB

  • memory/2928-11-0x000007FEFB070000-0x000007FEFB087000-memory.dmp

    Filesize

    92KB

  • memory/2928-12-0x000007FEFB050000-0x000007FEFB061000-memory.dmp

    Filesize

    68KB

  • memory/2928-13-0x000007FEFB030000-0x000007FEFB04D000-memory.dmp

    Filesize

    116KB

  • memory/2928-14-0x000007FEF7150000-0x000007FEF7161000-memory.dmp

    Filesize

    68KB

  • memory/2928-9-0x000007FEFB4B0000-0x000007FEFB4C7000-memory.dmp

    Filesize

    92KB

  • memory/2928-7-0x000007FEF6760000-0x000007FEF6A14000-memory.dmp

    Filesize

    2.7MB

  • memory/2928-16-0x000007FEF7110000-0x000007FEF714F000-memory.dmp

    Filesize

    252KB

  • memory/2928-15-0x000007FEF6560000-0x000007FEF6760000-memory.dmp

    Filesize

    2.0MB

  • memory/2928-18-0x000007FEF70E0000-0x000007FEF7101000-memory.dmp

    Filesize

    132KB

  • memory/2928-20-0x000007FEF6540000-0x000007FEF6551000-memory.dmp

    Filesize

    68KB

  • memory/2928-21-0x000007FEF6520000-0x000007FEF6531000-memory.dmp

    Filesize

    68KB

  • memory/2928-22-0x000007FEF6500000-0x000007FEF6511000-memory.dmp

    Filesize

    68KB

  • memory/2928-23-0x000007FEF64E0000-0x000007FEF64FB000-memory.dmp

    Filesize

    108KB

  • memory/2928-25-0x000007FEF64A0000-0x000007FEF64B8000-memory.dmp

    Filesize

    96KB

  • memory/2928-24-0x000007FEF64C0000-0x000007FEF64D1000-memory.dmp

    Filesize

    68KB

  • memory/2928-26-0x000007FEF6470000-0x000007FEF64A0000-memory.dmp

    Filesize

    192KB

  • memory/2928-27-0x000007FEF6400000-0x000007FEF6467000-memory.dmp

    Filesize

    412KB

  • memory/2928-28-0x000007FEF6390000-0x000007FEF63FF000-memory.dmp

    Filesize

    444KB

  • memory/2928-19-0x000007FEF6CB0000-0x000007FEF6CC8000-memory.dmp

    Filesize

    96KB

  • memory/2928-29-0x000007FEF6370000-0x000007FEF6381000-memory.dmp

    Filesize

    68KB

  • memory/2928-30-0x000007FEF51C0000-0x000007FEF5216000-memory.dmp

    Filesize

    344KB

  • memory/2928-31-0x000007FEF5040000-0x000007FEF51B8000-memory.dmp

    Filesize

    1.5MB

  • memory/2928-17-0x000007FEF5220000-0x000007FEF62CB000-memory.dmp

    Filesize

    16.7MB

  • memory/2928-32-0x000007FEF6350000-0x000007FEF6367000-memory.dmp

    Filesize

    92KB

  • memory/2928-33-0x000007FEF4ED0000-0x000007FEF5040000-memory.dmp

    Filesize

    1.4MB

  • memory/2928-35-0x000007FEF4E80000-0x000007FEF4EC2000-memory.dmp

    Filesize

    264KB

  • memory/2928-34-0x000007FEF6330000-0x000007FEF6342000-memory.dmp

    Filesize

    72KB

  • memory/2928-36-0x000007FEF4E30000-0x000007FEF4E7C000-memory.dmp

    Filesize

    304KB

  • memory/2928-37-0x000007FEF4CC0000-0x000007FEF4E2B000-memory.dmp

    Filesize

    1.4MB

  • memory/2928-38-0x000007FEF4C60000-0x000007FEF4CB7000-memory.dmp

    Filesize

    348KB

  • memory/2928-39-0x000007FEF4A10000-0x000007FEF4C5B000-memory.dmp

    Filesize

    2.3MB

  • memory/2928-40-0x000007FEF3260000-0x000007FEF4A10000-memory.dmp

    Filesize

    23.7MB

  • memory/2928-41-0x000007FEFB630000-0x000007FEFB640000-memory.dmp

    Filesize

    64KB

  • memory/2928-42-0x000007FEF3230000-0x000007FEF325F000-memory.dmp

    Filesize

    188KB

  • memory/2928-44-0x000007FEF31F0000-0x000007FEF3206000-memory.dmp

    Filesize

    88KB

  • memory/2928-43-0x000007FEF3210000-0x000007FEF3221000-memory.dmp

    Filesize

    68KB

  • memory/2928-45-0x000007FEF3120000-0x000007FEF31E5000-memory.dmp

    Filesize

    788KB

  • memory/2928-46-0x000007FEF30A0000-0x000007FEF3115000-memory.dmp

    Filesize

    468KB

  • memory/2928-47-0x000007FEF3030000-0x000007FEF3092000-memory.dmp

    Filesize

    392KB

  • memory/2928-48-0x000007FEF2FC0000-0x000007FEF302D000-memory.dmp

    Filesize

    436KB

  • memory/2928-49-0x000007FEF2FA0000-0x000007FEF2FB3000-memory.dmp

    Filesize

    76KB

  • memory/2928-50-0x000007FEF2F80000-0x000007FEF2F94000-memory.dmp

    Filesize

    80KB

  • memory/2928-51-0x000007FEF2F30000-0x000007FEF2F80000-memory.dmp

    Filesize

    320KB

  • memory/2928-52-0x000007FEF2F10000-0x000007FEF2F25000-memory.dmp

    Filesize

    84KB

  • memory/2928-53-0x000007FEF2CF0000-0x000007FEF2F0D000-memory.dmp

    Filesize

    2.1MB

  • memory/2928-54-0x000007FEF2CD0000-0x000007FEF2CE1000-memory.dmp

    Filesize

    68KB

  • memory/2928-55-0x000007FEF2CB0000-0x000007FEF2CC2000-memory.dmp

    Filesize

    72KB

  • memory/2928-57-0x000007FEF2C60000-0x000007FEF2C83000-memory.dmp

    Filesize

    140KB

  • memory/2928-56-0x000007FEF2C90000-0x000007FEF2CA5000-memory.dmp

    Filesize

    84KB

  • memory/2928-58-0x000007FEF2C40000-0x000007FEF2C53000-memory.dmp

    Filesize

    76KB

  • memory/2928-59-0x000007FEF2A30000-0x000007FEF2B24000-memory.dmp

    Filesize

    976KB

  • memory/2928-60-0x000007FEF28B0000-0x000007FEF2A2A000-memory.dmp

    Filesize

    1.5MB

  • memory/2928-61-0x000007FEF2C10000-0x000007FEF2C3A000-memory.dmp

    Filesize

    168KB

  • memory/2928-62-0x000007FEF2BF0000-0x000007FEF2C03000-memory.dmp

    Filesize

    76KB

  • memory/2928-66-0x000007FEF2B70000-0x000007FEF2B83000-memory.dmp

    Filesize

    76KB

  • memory/2928-68-0x000007FEF2890000-0x000007FEF28A2000-memory.dmp

    Filesize

    72KB

  • memory/2928-67-0x000007FEF2B50000-0x000007FEF2B64000-memory.dmp

    Filesize

    80KB

  • memory/2928-65-0x000007FEF2B90000-0x000007FEF2BA5000-memory.dmp

    Filesize

    84KB

  • memory/2928-64-0x000007FEF2BB0000-0x000007FEF2BC2000-memory.dmp

    Filesize

    72KB

  • memory/2928-63-0x000007FEF2BD0000-0x000007FEF2BEB000-memory.dmp

    Filesize

    108KB