Analysis

  • max time kernel
    140s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    20-05-2024 08:49

General

  • Target

    soothing-ambience-with-breathtaking-waterfall.3840x2160.mp4

  • Size

    71.5MB

  • MD5

    79805ff09b39ffb00542d66137de92c1

  • SHA1

    24ad71cbf72d8db182c96ed0480254525dcc8903

  • SHA256

    cad3f5316132f8a8156d79bafba843eed53e34b07bb4757f83c9e0abc77251ba

  • SHA512

    6d81d2dca8de9a42bd90088799624b63cbf88b08a81278830a4d31aadca3a2d6256c1e4a7a907d89962c1d730e9f4e7ace8fb23fa7498a49158a57338174cef7

  • SSDEEP

    1572864:hWTp+3p3zIg5c2eNqr1zjHRvR20yN0DYzb8vu9Luyo:OpQhzIgOPNqr1PRvXUXA3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 28 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\soothing-ambience-with-breathtaking-waterfall.3840x2160.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2392-6-0x000007FEF7740000-0x000007FEF7774000-memory.dmp

    Filesize

    208KB

  • memory/2392-5-0x000000013F9E0000-0x000000013FAD8000-memory.dmp

    Filesize

    992KB

  • memory/2392-7-0x000007FEF5D70000-0x000007FEF6026000-memory.dmp

    Filesize

    2.7MB

  • memory/2392-11-0x000007FEF74C0000-0x000007FEF74D7000-memory.dmp

    Filesize

    92KB

  • memory/2392-12-0x000007FEF74A0000-0x000007FEF74B1000-memory.dmp

    Filesize

    68KB

  • memory/2392-10-0x000007FEFA680000-0x000007FEFA691000-memory.dmp

    Filesize

    68KB

  • memory/2392-13-0x000007FEF6980000-0x000007FEF699D000-memory.dmp

    Filesize

    116KB

  • memory/2392-9-0x000007FEFAE40000-0x000007FEFAE57000-memory.dmp

    Filesize

    92KB

  • memory/2392-14-0x000007FEF6960000-0x000007FEF6971000-memory.dmp

    Filesize

    68KB

  • memory/2392-8-0x000007FEFB380000-0x000007FEFB398000-memory.dmp

    Filesize

    96KB

  • memory/2392-15-0x000007FEF5B60000-0x000007FEF5D6B000-memory.dmp

    Filesize

    2.0MB

  • memory/2392-17-0x000007FEF6910000-0x000007FEF6951000-memory.dmp

    Filesize

    260KB

  • memory/2392-27-0x000007FEF4A10000-0x000007FEF4A77000-memory.dmp

    Filesize

    412KB

  • memory/2392-30-0x000007FEF4910000-0x000007FEF4967000-memory.dmp

    Filesize

    348KB

  • memory/2392-29-0x000007FEF4970000-0x000007FEF4981000-memory.dmp

    Filesize

    68KB

  • memory/2392-28-0x000007FEF4990000-0x000007FEF4A0C000-memory.dmp

    Filesize

    496KB

  • memory/2392-26-0x000007FEF4A80000-0x000007FEF4AB0000-memory.dmp

    Filesize

    192KB

  • memory/2392-25-0x000007FEF63A0000-0x000007FEF63B8000-memory.dmp

    Filesize

    96KB

  • memory/2392-24-0x000007FEF63C0000-0x000007FEF63D1000-memory.dmp

    Filesize

    68KB

  • memory/2392-23-0x000007FEF63E0000-0x000007FEF63FB000-memory.dmp

    Filesize

    108KB

  • memory/2392-31-0x000007FEF4790000-0x000007FEF4910000-memory.dmp

    Filesize

    1.5MB

  • memory/2392-32-0x000007FEF4770000-0x000007FEF4787000-memory.dmp

    Filesize

    92KB

  • memory/2392-16-0x000007FEF4AB0000-0x000007FEF5B60000-memory.dmp

    Filesize

    16.7MB

  • memory/2392-22-0x000007FEF6400000-0x000007FEF6411000-memory.dmp

    Filesize

    68KB

  • memory/2392-21-0x000007FEF6420000-0x000007FEF6431000-memory.dmp

    Filesize

    68KB

  • memory/2392-20-0x000007FEF6440000-0x000007FEF6451000-memory.dmp

    Filesize

    68KB

  • memory/2392-19-0x000007FEF6460000-0x000007FEF6478000-memory.dmp

    Filesize

    96KB

  • memory/2392-18-0x000007FEF6480000-0x000007FEF64A1000-memory.dmp

    Filesize

    132KB

  • memory/2392-34-0x000007FEF2CF0000-0x000007FEF2EF6000-memory.dmp

    Filesize

    2.0MB

  • memory/2392-36-0x000007FEF2C80000-0x000007FEF2CC2000-memory.dmp

    Filesize

    264KB

  • memory/2392-35-0x000007FEF2CD0000-0x000007FEF2CE2000-memory.dmp

    Filesize

    72KB

  • memory/2392-40-0x000007FEF2510000-0x000007FEF2533000-memory.dmp

    Filesize

    140KB

  • memory/2392-55-0x000007FEF1F10000-0x000007FEF1F21000-memory.dmp

    Filesize

    68KB

  • memory/2392-41-0x000007FEF24F0000-0x000007FEF2503000-memory.dmp

    Filesize

    76KB

  • memory/2392-39-0x000007FEF2540000-0x000007FEF2555000-memory.dmp

    Filesize

    84KB

  • memory/2392-46-0x000007FEF2350000-0x000007FEF2362000-memory.dmp

    Filesize

    72KB

  • memory/2392-58-0x000007FEF1B80000-0x000007FEF1BB4000-memory.dmp

    Filesize

    208KB

  • memory/2392-57-0x000007FEF1BC0000-0x000007FEF1C17000-memory.dmp

    Filesize

    348KB

  • memory/2392-56-0x000007FEF1C20000-0x000007FEF1C6E000-memory.dmp

    Filesize

    312KB

  • memory/2392-54-0x000007FEF2080000-0x000007FEF20F4000-memory.dmp

    Filesize

    464KB

  • memory/2392-53-0x000007FEF2100000-0x000007FEF2147000-memory.dmp

    Filesize

    284KB

  • memory/2392-52-0x000007FEF2150000-0x000007FEF21B1000-memory.dmp

    Filesize

    388KB

  • memory/2392-51-0x000007FEF21C0000-0x000007FEF21D1000-memory.dmp

    Filesize

    68KB

  • memory/2392-50-0x000007FEF22D0000-0x000007FEF22E2000-memory.dmp

    Filesize

    72KB

  • memory/2392-49-0x000007FEF22F0000-0x000007FEF2304000-memory.dmp

    Filesize

    80KB

  • memory/2392-48-0x000007FEF2310000-0x000007FEF2323000-memory.dmp

    Filesize

    76KB

  • memory/2392-47-0x000007FEF2330000-0x000007FEF2345000-memory.dmp

    Filesize

    84KB

  • memory/2392-45-0x000007FEF2370000-0x000007FEF238B000-memory.dmp

    Filesize

    108KB

  • memory/2392-44-0x000007FEF2390000-0x000007FEF23A3000-memory.dmp

    Filesize

    76KB

  • memory/2392-43-0x000007FEF23B0000-0x000007FEF23DA000-memory.dmp

    Filesize

    168KB

  • memory/2392-38-0x000007FEF2560000-0x000007FEF2810000-memory.dmp

    Filesize

    2.7MB

  • memory/2392-42-0x000007FEF23E0000-0x000007FEF24E6000-memory.dmp

    Filesize

    1.0MB

  • memory/2392-37-0x000007FEF2C30000-0x000007FEF2C7D000-memory.dmp

    Filesize

    308KB

  • memory/2392-33-0x000007FEF2F00000-0x000007FEF476F000-memory.dmp

    Filesize

    24.4MB

  • memory/2392-61-0x000007FEF5D70000-0x000007FEF6026000-memory.dmp

    Filesize

    2.7MB