Analysis

  • max time kernel
    1790s
  • max time network
    1560s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 13:15

General

  • Target

    4batz - on god _ (she like) _sped up_.mp3

  • Size

    2.2MB

  • MD5

    73f71e47085c0539e00531d76d4bc621

  • SHA1

    45193482c5a0ba331414e1b7291a9002ad194aa4

  • SHA256

    b7d50af9fb50bfedaed643c4683094504ff94753371ac61e62dc3114fd99d272

  • SHA512

    3b668300f28bd0f218a37aa5af6d30ce6dab41b61599f9662ac96918e109ab937547c5a89502ea5cf58bb24e408ad3176819097419bb1e1f7ff1fad83f5a1cca

  • SSDEEP

    49152:m6ta4Ha6olFkklfG3AlXUSpdx2Gcf+NJJKLgfL7yPAjap:o466eFkklfGyjA+bJNfL+PC0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\4batz - on god _ (she like) _sped up_.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2244-5-0x000000013FC10000-0x000000013FD08000-memory.dmp

    Filesize

    992KB

  • memory/2244-6-0x000007FEF7C10000-0x000007FEF7C44000-memory.dmp

    Filesize

    208KB

  • memory/2244-7-0x000007FEF5B60000-0x000007FEF5E14000-memory.dmp

    Filesize

    2.7MB

  • memory/2244-8-0x000007FEFB020000-0x000007FEFB038000-memory.dmp

    Filesize

    96KB

  • memory/2244-9-0x000007FEFA420000-0x000007FEFA437000-memory.dmp

    Filesize

    92KB

  • memory/2244-10-0x000007FEF7BF0000-0x000007FEF7C01000-memory.dmp

    Filesize

    68KB

  • memory/2244-11-0x000007FEF6E10000-0x000007FEF6E27000-memory.dmp

    Filesize

    92KB

  • memory/2244-12-0x000007FEF6DF0000-0x000007FEF6E01000-memory.dmp

    Filesize

    68KB

  • memory/2244-14-0x000007FEF6280000-0x000007FEF6291000-memory.dmp

    Filesize

    68KB

  • memory/2244-13-0x000007FEF6DD0000-0x000007FEF6DED000-memory.dmp

    Filesize

    116KB

  • memory/2244-15-0x000007FEF5960000-0x000007FEF5B60000-memory.dmp

    Filesize

    2.0MB

  • memory/2244-16-0x000007FEF48B0000-0x000007FEF595B000-memory.dmp

    Filesize

    16.7MB

  • memory/2244-17-0x000007FEF6240000-0x000007FEF627F000-memory.dmp

    Filesize

    252KB

  • memory/2244-23-0x000007FEF4890000-0x000007FEF48AB000-memory.dmp

    Filesize

    108KB

  • memory/2244-22-0x000007FEF6190000-0x000007FEF61A1000-memory.dmp

    Filesize

    68KB

  • memory/2244-24-0x000007FEF4870000-0x000007FEF4881000-memory.dmp

    Filesize

    68KB

  • memory/2244-25-0x000007FEF4850000-0x000007FEF4868000-memory.dmp

    Filesize

    96KB

  • memory/2244-31-0x000007FEF46E0000-0x000007FEF46F1000-memory.dmp

    Filesize

    68KB

  • memory/2244-48-0x000007FEF43A0000-0x000007FEF43D0000-memory.dmp

    Filesize

    192KB

  • memory/2244-47-0x000007FEF43D0000-0x000007FEF43E2000-memory.dmp

    Filesize

    72KB

  • memory/2244-49-0x000007FEF4380000-0x000007FEF4397000-memory.dmp

    Filesize

    92KB

  • memory/2244-46-0x000007FEF43F0000-0x000007FEF441C000-memory.dmp

    Filesize

    176KB

  • memory/2244-45-0x000007FEF4420000-0x000007FEF4434000-memory.dmp

    Filesize

    80KB

  • memory/2244-44-0x000007FEF4440000-0x000007FEF4455000-memory.dmp

    Filesize

    84KB

  • memory/2244-43-0x000007FEF4460000-0x000007FEF4476000-memory.dmp

    Filesize

    88KB

  • memory/2244-42-0x000007FEF4480000-0x000007FEF449E000-memory.dmp

    Filesize

    120KB

  • memory/2244-41-0x000007FEF44A0000-0x000007FEF44B4000-memory.dmp

    Filesize

    80KB

  • memory/2244-52-0x000007FEF2B90000-0x000007FEF2BA2000-memory.dmp

    Filesize

    72KB

  • memory/2244-51-0x000007FEF2BB0000-0x000007FEF2BC1000-memory.dmp

    Filesize

    68KB

  • memory/2244-50-0x000007FEF2BD0000-0x000007FEF4380000-memory.dmp

    Filesize

    23.7MB

  • memory/2244-40-0x000007FEF44C0000-0x000007FEF44D2000-memory.dmp

    Filesize

    72KB

  • memory/2244-39-0x000007FEF44E0000-0x000007FEF44F4000-memory.dmp

    Filesize

    80KB

  • memory/2244-38-0x000007FEF4500000-0x000007FEF4511000-memory.dmp

    Filesize

    68KB

  • memory/2244-54-0x000007FEF29F0000-0x000007FEF2A07000-memory.dmp

    Filesize

    92KB

  • memory/2244-61-0x000007FEF2820000-0x000007FEF2882000-memory.dmp

    Filesize

    392KB

  • memory/2244-65-0x000007FEF2730000-0x000007FEF2742000-memory.dmp

    Filesize

    72KB

  • memory/2244-64-0x000007FEF2750000-0x000007FEF2761000-memory.dmp

    Filesize

    68KB

  • memory/2244-63-0x000007FEF2790000-0x000007FEF27A5000-memory.dmp

    Filesize

    84KB

  • memory/2244-62-0x000007FEF27B0000-0x000007FEF281D000-memory.dmp

    Filesize

    436KB

  • memory/2244-60-0x000007FEF2890000-0x000007FEF2905000-memory.dmp

    Filesize

    468KB

  • memory/2244-59-0x000007FEF2910000-0x000007FEF2926000-memory.dmp

    Filesize

    88KB

  • memory/2244-66-0x000007FEF25B0000-0x000007FEF272A000-memory.dmp

    Filesize

    1.5MB

  • memory/2244-58-0x000007FEFA410000-0x000007FEFA420000-memory.dmp

    Filesize

    64KB

  • memory/2244-57-0x000007FEF2930000-0x000007FEF2954000-memory.dmp

    Filesize

    144KB

  • memory/2244-56-0x000007FEF2960000-0x000007FEF2988000-memory.dmp

    Filesize

    160KB

  • memory/2244-55-0x000007FEF2990000-0x000007FEF29E6000-memory.dmp

    Filesize

    344KB

  • memory/2244-53-0x000007FEF2A10000-0x000007FEF2B88000-memory.dmp

    Filesize

    1.5MB

  • memory/2244-37-0x000007FEF4520000-0x000007FEF4532000-memory.dmp

    Filesize

    72KB

  • memory/2244-36-0x000007FEF4540000-0x000007FEF4605000-memory.dmp

    Filesize

    788KB

  • memory/2244-35-0x000007FEF4610000-0x000007FEF4621000-memory.dmp

    Filesize

    68KB

  • memory/2244-34-0x000007FEF4630000-0x000007FEF4643000-memory.dmp

    Filesize

    76KB

  • memory/2244-33-0x000007FEF4650000-0x000007FEF467F000-memory.dmp

    Filesize

    188KB

  • memory/2244-32-0x000007FEF4680000-0x000007FEF46D7000-memory.dmp

    Filesize

    348KB

  • memory/2244-30-0x000007FEF4700000-0x000007FEF4717000-memory.dmp

    Filesize

    92KB

  • memory/2244-29-0x000007FEF4720000-0x000007FEF4731000-memory.dmp

    Filesize

    68KB

  • memory/2244-28-0x000007FEF4740000-0x000007FEF47AF000-memory.dmp

    Filesize

    444KB

  • memory/2244-27-0x000007FEF47B0000-0x000007FEF4817000-memory.dmp

    Filesize

    412KB

  • memory/2244-26-0x000007FEF4820000-0x000007FEF4850000-memory.dmp

    Filesize

    192KB

  • memory/2244-21-0x000007FEF61B0000-0x000007FEF61C1000-memory.dmp

    Filesize

    68KB

  • memory/2244-20-0x000007FEF61D0000-0x000007FEF61E1000-memory.dmp

    Filesize

    68KB

  • memory/2244-19-0x000007FEF61F0000-0x000007FEF6208000-memory.dmp

    Filesize

    96KB

  • memory/2244-18-0x000007FEF6210000-0x000007FEF6231000-memory.dmp

    Filesize

    132KB