Analysis
-
max time kernel
140s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
20-05-2024 08:49
Static task
static1
Behavioral task
behavioral1
Sample
soothing-ambience-with-breathtaking-waterfall.3840x2160.mp4
Resource
win7-20240419-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
soothing-ambience-with-breathtaking-waterfall.3840x2160.mp4
Resource
win10v2004-20240508-en
windows10-2004-x64
26 signatures
150 seconds
General
-
Target
soothing-ambience-with-breathtaking-waterfall.3840x2160.mp4
-
Size
71.5MB
-
MD5
79805ff09b39ffb00542d66137de92c1
-
SHA1
24ad71cbf72d8db182c96ed0480254525dcc8903
-
SHA256
cad3f5316132f8a8156d79bafba843eed53e34b07bb4757f83c9e0abc77251ba
-
SHA512
6d81d2dca8de9a42bd90088799624b63cbf88b08a81278830a4d31aadca3a2d6256c1e4a7a907d89962c1d730e9f4e7ace8fb23fa7498a49158a57338174cef7
-
SSDEEP
1572864:hWTp+3p3zIg5c2eNqr1zjHRvR20yN0DYzb8vu9Luyo:OpQhzIgOPNqr1PRvXUXA3
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2392 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2392 vlc.exe -
Suspicious use of FindShellTrayWindow 28 IoCs
pid Process 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe 2392 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2392 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\soothing-ambience-with-breathtaking-waterfall.3840x2160.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2392