26efa8b5bd37a5a0486311c7a983a6cca22c0887369889045325fa8a3e7dc908

Analysis

max time kernel
80s
max time network
16s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 07:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MAGINA x FORCE.mp3
Size

4.2MB
MD5

fed815ed1d8704ed2a32d3d6389c26a7
SHA1

07e11cb0639fe6d0b2f55f88de6e5752ab65b506
SHA256

26efa8b5bd37a5a0486311c7a983a6cca22c0887369889045325fa8a3e7dc908
SHA512

2382894774bb5edafbdc3314d9d53b694acd03bc337dae6c74a9dd4d0aa78375cf27e7558b74c21bbd3e83f7a393864af7734cb6813841c5dc766390dce67ef9
SSDEEP

49152:NaozkU9TJiiIMjdcHxeZhxfndmwuI6tALGkH9NUCKtejuJeBSmRT5DLztv4lzfB3:pzX9ZvnswuI5pd/e/yH14tyHnKQhkCeT

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
1600	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1600	vlc.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	1600	vlc.exe
Token: SeIncBasePriorityPrivilege	1600	vlc.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
1600	vlc.exe
1600	vlc.exe
1600	vlc.exe
1600	vlc.exe
1600	vlc.exe
1600	vlc.exe

Suspicious use of SendNotifyMessage 5 IoCs

pid	Process
1600	vlc.exe
1600	vlc.exe
1600	vlc.exe
1600	vlc.exe
1600	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1600	vlc.exe

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\MAGINA x FORCE.mp3"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1600-6-0x000007FEFB170000-0x000007FEFB1A4000-memory.dmp

Filesize
208KB

Download
memory/1600-5-0x000000013FCA0000-0x000000013FD98000-memory.dmp

Filesize
992KB

Download
memory/1600-8-0x000007FEFB890000-0x000007FEFB8A8000-memory.dmp

Filesize
96KB

Download
memory/1600-14-0x000007FEF7A70000-0x000007FEF7A81000-memory.dmp

Filesize
68KB

Download
memory/1600-13-0x000007FEF7C30000-0x000007FEF7C4D000-memory.dmp

Filesize
116KB

Download
memory/1600-12-0x000007FEF7C50000-0x000007FEF7C61000-memory.dmp

Filesize
68KB

Download
memory/1600-7-0x000007FEF6440000-0x000007FEF66F6000-memory.dmp

Filesize
2.7MB

Download
memory/1600-11-0x000007FEF7C90000-0x000007FEF7CA7000-memory.dmp

Filesize
92KB

Download
memory/1600-10-0x000007FEFB130000-0x000007FEFB141000-memory.dmp

Filesize
68KB

Download
memory/1600-9-0x000007FEFB150000-0x000007FEFB167000-memory.dmp

Filesize
92KB

Download
memory/1600-15-0x000007FEF6230000-0x000007FEF643B000-memory.dmp

Filesize
2.0MB

Download
memory/1600-26-0x000007FEF5150000-0x000007FEF5180000-memory.dmp

Filesize
192KB

Download
memory/1600-35-0x000007FEF4F50000-0x000007FEF4F61000-memory.dmp

Filesize
68KB

Download
memory/1600-38-0x000007FEF31D0000-0x000007FEF31F8000-memory.dmp

Filesize
160KB

Download
memory/1600-40-0x000007FEF2FD0000-0x000007FEF2FE2000-memory.dmp

Filesize
72KB

Download
memory/1600-39-0x000007FEF2FF0000-0x000007FEF3001000-memory.dmp

Filesize
68KB

Download
memory/1600-16-0x000007FEF5180000-0x000007FEF6230000-memory.dmp

Filesize
16.7MB

Download
memory/1600-37-0x000007FEF3200000-0x000007FEF3257000-memory.dmp

Filesize
348KB

Download
memory/1600-34-0x000007FEF4F70000-0x000007FEF4F83000-memory.dmp

Filesize
76KB

Download
memory/1600-33-0x000007FEF4F90000-0x000007FEF4FBF000-memory.dmp

Filesize
188KB

Download
memory/1600-36-0x000007FEF4E80000-0x000007FEF4F45000-memory.dmp

Filesize
788KB

Download
memory/1600-41-0x000007FEF2E50000-0x000007FEF2FCA000-memory.dmp

Filesize
1.5MB

Download
memory/1600-32-0x000007FEF4FC0000-0x000007FEF5017000-memory.dmp

Filesize
348KB

Download
memory/1600-31-0x000007FEF5020000-0x000007FEF5031000-memory.dmp

Filesize
68KB

Download
memory/1600-30-0x000007FEF5040000-0x000007FEF5058000-memory.dmp

Filesize
96KB

Download
memory/1600-29-0x000007FEF69C0000-0x000007FEF69D1000-memory.dmp

Filesize
68KB

Download
memory/1600-28-0x000007FEF5060000-0x000007FEF50DC000-memory.dmp

Filesize
496KB

Download
memory/1600-27-0x000007FEF50E0000-0x000007FEF5147000-memory.dmp

Filesize
412KB

Download
memory/1600-25-0x000007FEF69E0000-0x000007FEF69F8000-memory.dmp

Filesize
96KB

Download
memory/1600-24-0x000007FEF6DA0000-0x000007FEF6DB1000-memory.dmp

Filesize
68KB

Download
memory/1600-23-0x000007FEF6DC0000-0x000007FEF6DDB000-memory.dmp

Filesize
108KB

Download
memory/1600-22-0x000007FEF6DE0000-0x000007FEF6DF1000-memory.dmp

Filesize
68KB

Download
memory/1600-21-0x000007FEF6FC0000-0x000007FEF6FD1000-memory.dmp

Filesize
68KB

Download
memory/1600-20-0x000007FEF79B0000-0x000007FEF79C1000-memory.dmp

Filesize
68KB

Download
memory/1600-19-0x000007FEF79D0000-0x000007FEF79E8000-memory.dmp

Filesize
96KB

Download
memory/1600-18-0x000007FEF79F0000-0x000007FEF7A11000-memory.dmp

Filesize
132KB

Download
memory/1600-17-0x000007FEF7A20000-0x000007FEF7A61000-memory.dmp

Filesize
260KB

Download