Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
26/05/2024, 08:05
Static task
static1
Behavioral task
behavioral1
Sample
y2mate.so - 13 Minutes Minecraft Parkour Gameplay [Free to Use] [Map Download]-NX-i0IWl3yg-360p-1716710623.mp4
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
y2mate.so - 13 Minutes Minecraft Parkour Gameplay [Free to Use] [Map Download]-NX-i0IWl3yg-360p-1716710623.mp4
Resource
win10v2004-20240508-en
General
-
Target
y2mate.so - 13 Minutes Minecraft Parkour Gameplay [Free to Use] [Map Download]-NX-i0IWl3yg-360p-1716710623.mp4
-
Size
60.9MB
-
MD5
05a6773e9349c4513f4443aaa494c88f
-
SHA1
0bcb754a445881a5414c3777ebd17dba3f937203
-
SHA256
bdb68ef433587ac31eddb07dfe93e185ad4ec15f6e8e3a17ebe6854fb27f9fdf
-
SHA512
20068be3e6c466a88449d8d50e73d0c79606780e2d005f9a52fc8de43cce94dc978ec082eadf7c4b94d8d2fb1c3faac2f7e8bbb712611cf4532a9ec4082309c7
-
SSDEEP
1572864:tGAHP98O4se+cOkFMYyknIh4N1xUMkes3M:tHHlRVgOIMYy5h+1Bs8
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1716 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1716 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 1716 vlc.exe Token: SeIncBasePriorityPrivilege 1716 vlc.exe -
Suspicious use of FindShellTrayWindow 23 IoCs
pid Process 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe -
Suspicious use of SendNotifyMessage 5 IoCs
pid Process 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe 1716 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1716 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\y2mate.so - 13 Minutes Minecraft Parkour Gameplay [Free to Use] [Map Download]-NX-i0IWl3yg-360p-1716710623.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1716