Analysis
-
max time kernel
30s -
max time network
35s -
platform
windows11-21h2_x64 -
resource
win11-20240419-en -
resource tags
-
submitted
02-05-2024 13:25
General
-
Target
Installer.zip
-
Size
95.0MB
-
MD5
625b751634f360d9ef55bd367964285f
-
SHA1
3d1630cc02a5dcf77557f14a78ac6134371c0556
-
SHA256
31ee8b1f5a729087bfcd58265b4558d9c382736e74934a18200756ac672f6005
-
SHA512
a5a6a9f00fab5d898dab089482e1d90857c3c7362ebf1d70223649d422802e9a0be917b0b061b0645bf918d881ebf3f8d994413313bd7cea78b321cb5c20d185
-
SSDEEP
1572864:/wwRlXfra1pKPtG9OP0M7gj3kUbGGtPV1oWC+610WD+FNkInj6eCqQ8UaNkQywdS:/wwLDaGP49OPk7k8GGfd7Y0nvkveCGDc
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 10 IoCs
-
Suspicious use of SendNotifyMessage 9 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Installer.zip1⤵
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\StopUnblock.mp2v"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
208KB
-
Filesize
992KB
-
Filesize
2.7MB
-
Filesize
16.7MB