Analysis
-
max time kernel
1790s -
max time network
1560s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
10/04/2024, 13:15
Static task
static1
Behavioral task
behavioral1
Sample
4batz - on god _ (she like) _sped up_.mp3
Resource
win7-20240220-en
6 signatures
1800 seconds
Behavioral task
behavioral2
Sample
4batz - on god _ (she like) _sped up_.mp3
Resource
win10v2004-20240226-en
3 signatures
1800 seconds
General
-
Target
4batz - on god _ (she like) _sped up_.mp3
-
Size
2.2MB
-
MD5
73f71e47085c0539e00531d76d4bc621
-
SHA1
45193482c5a0ba331414e1b7291a9002ad194aa4
-
SHA256
b7d50af9fb50bfedaed643c4683094504ff94753371ac61e62dc3114fd99d272
-
SHA512
3b668300f28bd0f218a37aa5af6d30ce6dab41b61599f9662ac96918e109ab937547c5a89502ea5cf58bb24e408ad3176819097419bb1e1f7ff1fad83f5a1cca
-
SSDEEP
49152:m6ta4Ha6olFkklfG3AlXUSpdx2Gcf+NJJKLgfL7yPAjap:o466eFkklfGyjA+bJNfL+PC0
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2244 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2244 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2244 vlc.exe Token: SeIncBasePriorityPrivilege 2244 vlc.exe -
Suspicious use of FindShellTrayWindow 9 IoCs
pid Process 2244 vlc.exe 2244 vlc.exe 2244 vlc.exe 2244 vlc.exe 2244 vlc.exe 2244 vlc.exe 2244 vlc.exe 2244 vlc.exe 2244 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2244 vlc.exe 2244 vlc.exe 2244 vlc.exe 2244 vlc.exe 2244 vlc.exe 2244 vlc.exe 2244 vlc.exe 2244 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2244 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\4batz - on god _ (she like) _sped up_.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2244