Analysis

  • max time kernel
    142s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/03/2024, 22:39

General

  • Target

    Cat.Goes.Fishing.v13.11.2019/music_EasyLemon.ogg

  • Size

    1022KB

  • MD5

    34424ebb6a54fedb133782d9ed7e5e87

  • SHA1

    f8a285ce0b8ae267751a335c1a56887e59f53cfa

  • SHA256

    22358861581e2c7616b96aef602ce3b1553c1b4ad68ce330a27aad6576f74211

  • SHA512

    4cc739277ef537431913e312594a94dabfcd7d04544f891ed378222dbce12e73a1c1c0eb5da8e57f12f1d86b5e563371d31bbe1539653558ecb861b6895456e8

  • SSDEEP

    24576:XErSZsqLxHcbaYQ8RIyFKUK5lwypgZCIHRg0d:kSZs88OSRm3vuCIG2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Cat.Goes.Fishing.v13.11.2019\music_EasyLemon.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2224-5-0x000000013FE00000-0x000000013FEF8000-memory.dmp

          Filesize

          992KB

        • memory/2224-6-0x000007FEFB800000-0x000007FEFB834000-memory.dmp

          Filesize

          208KB

        • memory/2224-7-0x000007FEF6560000-0x000007FEF6814000-memory.dmp

          Filesize

          2.7MB

        • memory/2224-9-0x000007FEFB9D0000-0x000007FEFB9E7000-memory.dmp

          Filesize

          92KB

        • memory/2224-11-0x000007FEFB6B0000-0x000007FEFB6C7000-memory.dmp

          Filesize

          92KB

        • memory/2224-12-0x000007FEFB690000-0x000007FEFB6A1000-memory.dmp

          Filesize

          68KB

        • memory/2224-14-0x000007FEFB650000-0x000007FEFB661000-memory.dmp

          Filesize

          68KB

        • memory/2224-13-0x000007FEFB670000-0x000007FEFB68D000-memory.dmp

          Filesize

          116KB

        • memory/2224-10-0x000007FEFB900000-0x000007FEFB911000-memory.dmp

          Filesize

          68KB

        • memory/2224-8-0x000007FEFC110000-0x000007FEFC128000-memory.dmp

          Filesize

          96KB

        • memory/2224-15-0x000007FEF6360000-0x000007FEF6560000-memory.dmp

          Filesize

          2.0MB

        • memory/2224-16-0x000007FEFB610000-0x000007FEFB64F000-memory.dmp

          Filesize

          252KB

        • memory/2224-17-0x000007FEF7DD0000-0x000007FEF7DF1000-memory.dmp

          Filesize

          132KB

        • memory/2224-18-0x000007FEFB5F0000-0x000007FEFB608000-memory.dmp

          Filesize

          96KB

        • memory/2224-20-0x000007FEF7DB0000-0x000007FEF7DC1000-memory.dmp

          Filesize

          68KB

        • memory/2224-21-0x000007FEF7D10000-0x000007FEF7D21000-memory.dmp

          Filesize

          68KB

        • memory/2224-23-0x000007FEF7260000-0x000007FEF727B000-memory.dmp

          Filesize

          108KB

        • memory/2224-22-0x000007FEF7280000-0x000007FEF7291000-memory.dmp

          Filesize

          68KB

        • memory/2224-24-0x000007FEF7240000-0x000007FEF7251000-memory.dmp

          Filesize

          68KB

        • memory/2224-25-0x000007FEF7220000-0x000007FEF7238000-memory.dmp

          Filesize

          96KB

        • memory/2224-26-0x000007FEF71F0000-0x000007FEF7220000-memory.dmp

          Filesize

          192KB

        • memory/2224-27-0x000007FEF7180000-0x000007FEF71E7000-memory.dmp

          Filesize

          412KB

        • memory/2224-19-0x000007FEF52B0000-0x000007FEF635B000-memory.dmp

          Filesize

          16.7MB

        • memory/2224-28-0x000007FEF7110000-0x000007FEF717F000-memory.dmp

          Filesize

          444KB

        • memory/2224-29-0x000007FEF70F0000-0x000007FEF7101000-memory.dmp

          Filesize

          68KB

        • memory/2224-30-0x000007FEF6C40000-0x000007FEF6C9C000-memory.dmp

          Filesize

          368KB

        • memory/2224-31-0x000007FEF5130000-0x000007FEF52A8000-memory.dmp

          Filesize

          1.5MB

        • memory/2224-32-0x000007FEF6D30000-0x000007FEF6D47000-memory.dmp

          Filesize

          92KB

        • memory/2224-33-0x000007FEF7DA0000-0x000007FEF7DB0000-memory.dmp

          Filesize

          64KB

        • memory/2224-34-0x000007FEF6C10000-0x000007FEF6C3F000-memory.dmp

          Filesize

          188KB

        • memory/2224-35-0x000007FEF6BF0000-0x000007FEF6C01000-memory.dmp

          Filesize

          68KB

        • memory/2224-36-0x000007FEF6BD0000-0x000007FEF6BE6000-memory.dmp

          Filesize

          88KB

        • memory/2224-37-0x000007FEF5060000-0x000007FEF5125000-memory.dmp

          Filesize

          788KB

        • memory/2224-39-0x000007FEF5040000-0x000007FEF5051000-memory.dmp

          Filesize

          68KB

        • memory/2224-40-0x000007FEF5020000-0x000007FEF5032000-memory.dmp

          Filesize

          72KB

        • memory/2224-38-0x000007FEF6BB0000-0x000007FEF6BC5000-memory.dmp

          Filesize

          84KB

        • memory/2224-41-0x000007FEF4EA0000-0x000007FEF501A000-memory.dmp

          Filesize

          1.5MB

        • memory/2224-42-0x000007FEF4E80000-0x000007FEF4E93000-memory.dmp

          Filesize

          76KB

        • memory/2224-43-0x000007FEF4E60000-0x000007FEF4E74000-memory.dmp

          Filesize

          80KB

        • memory/2224-45-0x000007FEF4E20000-0x000007FEF4E31000-memory.dmp

          Filesize

          68KB

        • memory/2224-46-0x000007FEF4E00000-0x000007FEF4E11000-memory.dmp

          Filesize

          68KB

        • memory/2224-44-0x000007FEF4E40000-0x000007FEF4E51000-memory.dmp

          Filesize

          68KB

        • memory/2224-61-0x000007FEF52B0000-0x000007FEF635B000-memory.dmp

          Filesize

          16.7MB