Analysis

  • max time kernel
    1790s
  • max time network
    1568s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 05:09

General

  • Target

    Goofy Sounds Sample Pack (200+ Sounds Version)/Archery.wav

  • Size

    488KB

  • MD5

    f93dc4d8d0d852e835c446ccda1b0b4e

  • SHA1

    fa3ef81661f8eddfec8c37a8579d3e893d89d6bf

  • SHA256

    39666fe716e8cbc2f19e3a92ea7af273a81518e772c7fdb683cb32127e114afc

  • SHA512

    7a45b1886e566a5c747d462b78032dfa296d33829dbf7daff0a6fbf0af892161650515d431520c3bbaa692ab850fd35ed7821e024c279e61f98e04b6a957a335

  • SSDEEP

    12288:FX5XrL39swsPvuLWViUxBf49rB5BXEEe/E5j8/MeYuE:FXJL393wuLWViaN49/BXxes5jBeW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Goofy Sounds Sample Pack (200+ Sounds Version)\Archery.wav"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2308-6-0x000007FEF7DB0000-0x000007FEF7DE4000-memory.dmp

    Filesize

    208KB

  • memory/2308-5-0x000000013F820000-0x000000013F918000-memory.dmp

    Filesize

    992KB

  • memory/2308-8-0x000007FEFB9F0000-0x000007FEFBA08000-memory.dmp

    Filesize

    96KB

  • memory/2308-9-0x000007FEFACF0000-0x000007FEFAD07000-memory.dmp

    Filesize

    92KB

  • memory/2308-10-0x000007FEF7D90000-0x000007FEF7DA1000-memory.dmp

    Filesize

    68KB

  • memory/2308-11-0x000007FEF7B10000-0x000007FEF7B27000-memory.dmp

    Filesize

    92KB

  • memory/2308-12-0x000007FEF7AF0000-0x000007FEF7B01000-memory.dmp

    Filesize

    68KB

  • memory/2308-13-0x000007FEF6FD0000-0x000007FEF6FED000-memory.dmp

    Filesize

    116KB

  • memory/2308-14-0x000007FEF6FB0000-0x000007FEF6FC1000-memory.dmp

    Filesize

    68KB

  • memory/2308-7-0x000007FEF6350000-0x000007FEF6604000-memory.dmp

    Filesize

    2.7MB

  • memory/2308-15-0x000007FEF6150000-0x000007FEF6350000-memory.dmp

    Filesize

    2.0MB

  • memory/2308-17-0x000007FEF6F70000-0x000007FEF6FAF000-memory.dmp

    Filesize

    252KB

  • memory/2308-20-0x000007FEF6AD0000-0x000007FEF6AE1000-memory.dmp

    Filesize

    68KB

  • memory/2308-18-0x000007FEF6B10000-0x000007FEF6B31000-memory.dmp

    Filesize

    132KB

  • memory/2308-19-0x000007FEF6AF0000-0x000007FEF6B08000-memory.dmp

    Filesize

    96KB

  • memory/2308-23-0x000007FEF6A30000-0x000007FEF6A4B000-memory.dmp

    Filesize

    108KB

  • memory/2308-24-0x000007FEF6A10000-0x000007FEF6A21000-memory.dmp

    Filesize

    68KB

  • memory/2308-22-0x000007FEF6A50000-0x000007FEF6A61000-memory.dmp

    Filesize

    68KB

  • memory/2308-21-0x000007FEF6A70000-0x000007FEF6A81000-memory.dmp

    Filesize

    68KB

  • memory/2308-25-0x000007FEF69F0000-0x000007FEF6A08000-memory.dmp

    Filesize

    96KB

  • memory/2308-26-0x000007FEF69C0000-0x000007FEF69F0000-memory.dmp

    Filesize

    192KB

  • memory/2308-27-0x000007FEF5030000-0x000007FEF5097000-memory.dmp

    Filesize

    412KB

  • memory/2308-29-0x000007FEF69A0000-0x000007FEF69B1000-memory.dmp

    Filesize

    68KB

  • memory/2308-30-0x000007FEF4F60000-0x000007FEF4FB6000-memory.dmp

    Filesize

    344KB

  • memory/2308-28-0x000007FEF4FC0000-0x000007FEF502F000-memory.dmp

    Filesize

    444KB

  • memory/2308-31-0x000007FEF4F30000-0x000007FEF4F58000-memory.dmp

    Filesize

    160KB

  • memory/2308-32-0x000007FEF4F00000-0x000007FEF4F24000-memory.dmp

    Filesize

    144KB

  • memory/2308-33-0x000007FEF6980000-0x000007FEF6997000-memory.dmp

    Filesize

    92KB

  • memory/2308-35-0x000007FEF4EB0000-0x000007FEF4EC1000-memory.dmp

    Filesize

    68KB

  • memory/2308-37-0x000007FEF4C10000-0x000007FEF4C25000-memory.dmp

    Filesize

    84KB

  • memory/2308-36-0x000007FEF4E90000-0x000007FEF4EA2000-memory.dmp

    Filesize

    72KB

  • memory/2308-34-0x000007FEF4ED0000-0x000007FEF4EF3000-memory.dmp

    Filesize

    140KB

  • memory/2308-38-0x000007FEF4BD0000-0x000007FEF4BE1000-memory.dmp

    Filesize

    68KB

  • memory/2308-39-0x000007FEF4BB0000-0x000007FEF4BC2000-memory.dmp

    Filesize

    72KB

  • memory/2308-41-0x000007FEF4A10000-0x000007FEF4A23000-memory.dmp

    Filesize

    76KB

  • memory/2308-44-0x000007FEF49B0000-0x000007FEF49C1000-memory.dmp

    Filesize

    68KB

  • memory/2308-46-0x000007FEF4970000-0x000007FEF4986000-memory.dmp

    Filesize

    88KB

  • memory/2308-45-0x000007FEF4990000-0x000007FEF49A1000-memory.dmp

    Filesize

    68KB

  • memory/2308-43-0x000007FEF49D0000-0x000007FEF49E1000-memory.dmp

    Filesize

    68KB

  • memory/2308-42-0x000007FEF49F0000-0x000007FEF4A04000-memory.dmp

    Filesize

    80KB

  • memory/2308-40-0x000007FEF4A30000-0x000007FEF4BAA000-memory.dmp

    Filesize

    1.5MB

  • memory/2308-16-0x000007FEF50A0000-0x000007FEF614B000-memory.dmp

    Filesize

    16.7MB