Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
18-03-2024 15:45
Static task
static1
Behavioral task
behavioral1
Sample
AllVideo_1710044426819.mp4
Resource
win7-20240221-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
AllVideo_1710044426819.mp4
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
AllVideo_1710044426819.mp4
-
Size
15.7MB
-
MD5
aa3006ef37dddc8a68b199a60dbfb3a5
-
SHA1
622cad4e7bd5dace681493fe9e760d6ceab70183
-
SHA256
79403f62d1273801b73f8ca28a9a9905f113f651e0a0ee4d36f7f60330e41a45
-
SHA512
aebb62b3913dc7668095e9959766ca5ebb60753392ec2388020642f60da3bf465a0ad6dcbf0aa587bc0addb7c96146d4ef7a790f07914d8ab769f251bd5457ce
-
SSDEEP
393216:XqZyDTQbGPi0RVaUoCa9IoGLCy4rH1QY9HG3Kpm2uzV:hDTkGsUd54jyY9HGp2W
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2228 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2228 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2228 vlc.exe Token: SeIncBasePriorityPrivilege 2228 vlc.exe -
Suspicious use of FindShellTrayWindow 28 IoCs
pid Process 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe -
Suspicious use of SendNotifyMessage 9 IoCs
pid Process 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe 2228 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2228 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\AllVideo_1710044426819.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2228