Analysis
-
max time kernel
141s -
max time network
94s -
platform
windows11-21h2_x64 -
resource
win11-20240426-en -
resource tags
-
submitted
30/04/2024, 07:34
General
-
Target
SOUND27.wav
-
Size
19KB
-
MD5
afa9ee18904167c87be0ddd3da6cdca0
-
SHA1
d403214aeb68ccb48c156332d1e28f60a1864181
-
SHA256
a56953cf0ff543930fe3d32787b330ff7339e2f8e93b2fff9389cd6a799439e2
-
SHA512
42bbe4366d533ac0fe06d98fe930c7912395a028e3bb861ff988dccb1382e0a3abb7832bc472f1934e1c090865dc2bb740070dad1724f50462ccf209e31dc032
-
SSDEEP
384:asyD+4OfSREQCcHxqvWhq8vyIkvIyU387CQwk1O5HG+iCvVRq6GSaiRD4VIH4G:Tv4TRhlHxqlNIkvIFeCtkI5m+iuRquJP
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
-
Suspicious use of FindShellTrayWindow 9 IoCs
-
Suspicious use of SendNotifyMessage 8 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\SOUND27.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004B81⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
992KB
-
Filesize
208KB
-
Filesize
92KB
-
Filesize
68KB
-
Filesize
116KB
-
Filesize
260KB
-
Filesize
68KB
-
Filesize
2.7MB
-
Filesize
96KB
-
Filesize
68KB
-
Filesize
92KB
-
Filesize
68KB
-
Filesize
412KB
-
Filesize
68KB
-
Filesize
496KB
-
Filesize
192KB
-
Filesize
16.7MB
-
Filesize
96KB
-
Filesize
68KB
-
Filesize
108KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
348KB
-
Filesize
96KB
-
Filesize
132KB
-
Filesize
2.0MB