69caee31ce435c9cd6b57cd42ccc48317b12117fd2c933b36565c59a8ace83c6

Analysis

max time kernel
109s
max time network
78s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12/03/2024, 04:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Jupiter.exe
Size

8.1MB
MD5

6de569b63ef95c5851bac2ca87867a32
SHA1

a6022986ab6622b530d38232a6772bce1e6a50ca
SHA256

69caee31ce435c9cd6b57cd42ccc48317b12117fd2c933b36565c59a8ace83c6
SHA512

a85c3e6d4a3e56a4fb065a43174ae3ded469e95507140c4a2b74d4a206b1e31109c809e681cab42478b928182256fd60f91481007dad13eaf3c7d23afa886ef7
SSDEEP

196608:VbgNceC1CBkf0eWMgibyKfaRZwPIbr53Wk77VYcJIStD:lhF/WtBnRGPc53Wk77VYcnD

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2816	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2816	vlc.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe
2816	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2816	vlc.exe

C:\Users\Admin\AppData\Local\Temp\Jupiter.exe
"C:\Users\Admin\AppData\Local\Temp\Jupiter.exe"
1⤵
PID:2200

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\UndoRead.mp3"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2816

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
PID:1556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini

Filesize
73B

MD5
8eeb99595328c3f08d8fef393e9f3974

SHA1
4450d67f3fde6cd1944203b328c67f70d90dda16

SHA256
9e76634afe69f3bdabbbee66e08c21862c3c5c146eb0413da7e3d917c6ebfaa6

SHA512
70789f8450358b1694001e62477404fd9d0e0721bc0a5a65fdfda313cab8552f43c0a18c59a3cdcbc9e5354dff1e1bb5c1da6c75df42c848cdc4802b816c891a

Download Submit
C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini.lock

Filesize
18B

MD5
7bcde15531eed3eb639333fc805ba655

SHA1
ef8701b6064f6710b474d34faedf10c042977f88

SHA256
cb49895eafb9f1ebf73871de185dca4ab30e153ee15003799abe16442f7649b6

SHA512
b880909446cb2c830f85d556f42912db7e87fbd9e279da9563af7562efe17cf363177882d73be8e0e9d5b92d7836fe835102ec77486424c56cf97784c5af11f2

Download Submit
memory/2816-32-0x000000013FD90000-0x000000013FE88000-memory.dmp

Filesize
992KB

Download
memory/2816-33-0x000007FEF76B0000-0x000007FEF76E4000-memory.dmp

Filesize
208KB

Download
memory/2816-34-0x000007FEF60A0000-0x000007FEF6354000-memory.dmp

Filesize
2.7MB

Download
memory/2816-35-0x000007FEFC6F0000-0x000007FEFC708000-memory.dmp

Filesize
96KB

Download
memory/2816-40-0x000007FEF7040000-0x000007FEF705D000-memory.dmp

Filesize
116KB

Download
memory/2816-39-0x000007FEF7670000-0x000007FEF7681000-memory.dmp

Filesize
68KB

Download
memory/2816-38-0x000007FEF7690000-0x000007FEF76A7000-memory.dmp

Filesize
92KB

Download
memory/2816-37-0x000007FEF7C40000-0x000007FEF7C51000-memory.dmp

Filesize
68KB

Download
memory/2816-36-0x000007FEF7F20000-0x000007FEF7F37000-memory.dmp

Filesize
92KB

Download
memory/2816-41-0x000007FEF5EA0000-0x000007FEF60A0000-memory.dmp

Filesize
2.0MB

Download
memory/2816-42-0x000007FEF7020000-0x000007FEF7031000-memory.dmp

Filesize
68KB

Download
memory/2816-43-0x000007FEF6BA0000-0x000007FEF6BDF000-memory.dmp

Filesize
252KB

Download
memory/2816-44-0x000007FEF6B70000-0x000007FEF6B91000-memory.dmp

Filesize
132KB

Download
memory/2816-45-0x000007FEF6B50000-0x000007FEF6B68000-memory.dmp

Filesize
96KB

Download
memory/2816-48-0x000007FEF6AF0000-0x000007FEF6B01000-memory.dmp

Filesize
68KB

Download
memory/2816-47-0x000007FEF6B10000-0x000007FEF6B21000-memory.dmp

Filesize
68KB

Download
memory/2816-46-0x000007FEF6B30000-0x000007FEF6B41000-memory.dmp

Filesize
68KB

Download
memory/2816-49-0x000007FEF6AD0000-0x000007FEF6AEB000-memory.dmp

Filesize
108KB

Download
memory/2816-50-0x000007FEF5E80000-0x000007FEF5E91000-memory.dmp

Filesize
68KB

Download
memory/2816-51-0x000007FEF5E60000-0x000007FEF5E78000-memory.dmp

Filesize
96KB

Download
memory/2816-52-0x000007FEF5E30000-0x000007FEF5E60000-memory.dmp

Filesize
192KB

Download
memory/2816-53-0x000007FEF4D80000-0x000007FEF5E2B000-memory.dmp

Filesize
16.7MB

Download
memory/2816-54-0x000007FEF4D10000-0x000007FEF4D77000-memory.dmp

Filesize
412KB

Download
memory/2816-55-0x000007FEF4CA0000-0x000007FEF4D0F000-memory.dmp

Filesize
444KB

Download
memory/2816-56-0x000007FEF4C80000-0x000007FEF4C91000-memory.dmp

Filesize
68KB

Download
memory/2816-57-0x000007FEF4C60000-0x000007FEF4C77000-memory.dmp

Filesize
92KB

Download
memory/2816-71-0x000007FEF49A0000-0x000007FEF49B5000-memory.dmp

Filesize
84KB

Download
memory/2816-72-0x000007FEF4980000-0x000007FEF4994000-memory.dmp

Filesize
80KB

Download
memory/2816-74-0x000007FEF4930000-0x000007FEF4942000-memory.dmp

Filesize
72KB

Download
memory/2816-73-0x000007FEF4950000-0x000007FEF497C000-memory.dmp

Filesize
176KB

Download
memory/2816-76-0x000007FEF48E0000-0x000007FEF48F7000-memory.dmp

Filesize
92KB

Download
memory/2816-75-0x000007FEF4900000-0x000007FEF4930000-memory.dmp

Filesize
192KB

Download
memory/2816-70-0x000007FEF49C0000-0x000007FEF49D6000-memory.dmp

Filesize
88KB

Download
memory/2816-69-0x000007FEF49E0000-0x000007FEF49FE000-memory.dmp

Filesize
120KB

Download
memory/2816-68-0x000007FEF4A00000-0x000007FEF4A14000-memory.dmp

Filesize
80KB

Download
memory/2816-67-0x000007FEF4A20000-0x000007FEF4A32000-memory.dmp

Filesize
72KB

Download
memory/2816-66-0x000007FEF4A40000-0x000007FEF4A54000-memory.dmp

Filesize
80KB

Download
memory/2816-65-0x000007FEF4A60000-0x000007FEF4A71000-memory.dmp

Filesize
68KB

Download
memory/2816-64-0x000007FEF4A80000-0x000007FEF4A92000-memory.dmp

Filesize
72KB

Download
memory/2816-63-0x000007FEF4AA0000-0x000007FEF4B65000-memory.dmp

Filesize
788KB

Download
memory/2816-62-0x000007FEF4B70000-0x000007FEF4B81000-memory.dmp

Filesize
68KB

Download
memory/2816-61-0x000007FEF4B90000-0x000007FEF4BA3000-memory.dmp

Filesize
76KB

Download
memory/2816-60-0x000007FEF4BB0000-0x000007FEF4BDF000-memory.dmp

Filesize
188KB

Download
memory/2816-59-0x000007FEF4BE0000-0x000007FEF4C37000-memory.dmp

Filesize
348KB

Download
memory/2816-58-0x000007FEF4C40000-0x000007FEF4C51000-memory.dmp

Filesize
68KB

Download
memory/2816-77-0x000007FEF3130000-0x000007FEF48E0000-memory.dmp

Filesize
23.7MB

Download
memory/2816-78-0x000007FEF3110000-0x000007FEF3121000-memory.dmp

Filesize
68KB

Download
memory/2816-79-0x000007FEF30F0000-0x000007FEF3102000-memory.dmp

Filesize
72KB

Download
memory/2816-80-0x000007FEF2F70000-0x000007FEF30E8000-memory.dmp

Filesize
1.5MB

Download
memory/2816-81-0x000007FEF2F50000-0x000007FEF2F67000-memory.dmp

Filesize
92KB

Download
memory/2816-82-0x000007FEF2EF0000-0x000007FEF2F46000-memory.dmp

Filesize
344KB

Download
memory/2816-83-0x000007FEF2EC0000-0x000007FEF2EE8000-memory.dmp

Filesize
160KB

Download
memory/2816-84-0x000007FEF2E90000-0x000007FEF2EB4000-memory.dmp

Filesize
144KB

Download
memory/2816-95-0x000000013FD90000-0x000000013FE88000-memory.dmp

Filesize
992KB

Download
memory/2816-96-0x000007FEF76B0000-0x000007FEF76E4000-memory.dmp

Filesize
208KB

Download
memory/2816-97-0x000007FEF60A0000-0x000007FEF6354000-memory.dmp

Filesize
2.7MB

Download
memory/2816-98-0x000007FEF4D80000-0x000007FEF5E2B000-memory.dmp

Filesize
16.7MB

Download