Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 08:05

General

  • Target

    y2mate.so - 13 Minutes Minecraft Parkour Gameplay [Free to Use] [Map Download]-NX-i0IWl3yg-360p-1716710623.mp4

  • Size

    60.9MB

  • MD5

    05a6773e9349c4513f4443aaa494c88f

  • SHA1

    0bcb754a445881a5414c3777ebd17dba3f937203

  • SHA256

    bdb68ef433587ac31eddb07dfe93e185ad4ec15f6e8e3a17ebe6854fb27f9fdf

  • SHA512

    20068be3e6c466a88449d8d50e73d0c79606780e2d005f9a52fc8de43cce94dc978ec082eadf7c4b94d8d2fb1c3faac2f7e8bbb712611cf4532a9ec4082309c7

  • SSDEEP

    1572864:tGAHP98O4se+cOkFMYyknIh4N1xUMkes3M:tHHlRVgOIMYy5h+1Bs8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 23 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\y2mate.so - 13 Minutes Minecraft Parkour Gameplay [Free to Use] [Map Download]-NX-i0IWl3yg-360p-1716710623.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1716-5-0x000000013F4B0000-0x000000013F5A8000-memory.dmp

    Filesize

    992KB

  • memory/1716-6-0x000007FEF7E00000-0x000007FEF7E34000-memory.dmp

    Filesize

    208KB

  • memory/1716-7-0x000007FEF6410000-0x000007FEF66C4000-memory.dmp

    Filesize

    2.7MB

  • memory/1716-13-0x000007FEF70B0000-0x000007FEF70CD000-memory.dmp

    Filesize

    116KB

  • memory/1716-12-0x000007FEF7600000-0x000007FEF7611000-memory.dmp

    Filesize

    68KB

  • memory/1716-11-0x000007FEF7640000-0x000007FEF7657000-memory.dmp

    Filesize

    92KB

  • memory/1716-10-0x000007FEF7BE0000-0x000007FEF7BF1000-memory.dmp

    Filesize

    68KB

  • memory/1716-9-0x000007FEF7E70000-0x000007FEF7E87000-memory.dmp

    Filesize

    92KB

  • memory/1716-8-0x000007FEFC190000-0x000007FEFC1A8000-memory.dmp

    Filesize

    96KB

  • memory/1716-14-0x000007FEF6210000-0x000007FEF6410000-memory.dmp

    Filesize

    2.0MB

  • memory/1716-25-0x000007FEF6AA0000-0x000007FEF6AD0000-memory.dmp

    Filesize

    192KB

  • memory/1716-24-0x000007FEF6AD0000-0x000007FEF6AE8000-memory.dmp

    Filesize

    96KB

  • memory/1716-23-0x000007FEF6AF0000-0x000007FEF6B01000-memory.dmp

    Filesize

    68KB

  • memory/1716-22-0x000007FEF6B10000-0x000007FEF6B2B000-memory.dmp

    Filesize

    108KB

  • memory/1716-21-0x000007FEF6B30000-0x000007FEF6B41000-memory.dmp

    Filesize

    68KB

  • memory/1716-20-0x000007FEF6B90000-0x000007FEF6BA1000-memory.dmp

    Filesize

    68KB

  • memory/1716-19-0x000007FEF6BB0000-0x000007FEF6BC1000-memory.dmp

    Filesize

    68KB

  • memory/1716-18-0x000007FEF6BD0000-0x000007FEF6BE8000-memory.dmp

    Filesize

    96KB

  • memory/1716-17-0x000007FEF6BF0000-0x000007FEF6C11000-memory.dmp

    Filesize

    132KB

  • memory/1716-16-0x000007FEF7050000-0x000007FEF708F000-memory.dmp

    Filesize

    252KB

  • memory/1716-15-0x000007FEF7090000-0x000007FEF70A1000-memory.dmp

    Filesize

    68KB

  • memory/1716-29-0x000007FEF6A80000-0x000007FEF6A91000-memory.dmp

    Filesize

    68KB

  • memory/1716-30-0x000007FEF5020000-0x000007FEF5076000-memory.dmp

    Filesize

    344KB

  • memory/1716-28-0x000007FEF5080000-0x000007FEF50EF000-memory.dmp

    Filesize

    444KB

  • memory/1716-32-0x000007FEF6A60000-0x000007FEF6A77000-memory.dmp

    Filesize

    92KB

  • memory/1716-37-0x000007FEF4B20000-0x000007FEF4C8B000-memory.dmp

    Filesize

    1.4MB

  • memory/1716-36-0x000007FEF4C90000-0x000007FEF4CDC000-memory.dmp

    Filesize

    304KB

  • memory/1716-39-0x000007FEF4870000-0x000007FEF4ABB000-memory.dmp

    Filesize

    2.3MB

  • memory/1716-38-0x000007FEF4AC0000-0x000007FEF4B17000-memory.dmp

    Filesize

    348KB

  • memory/1716-26-0x000007FEF5160000-0x000007FEF620B000-memory.dmp

    Filesize

    16.7MB

  • memory/1716-35-0x000007FEF4CE0000-0x000007FEF4D22000-memory.dmp

    Filesize

    264KB

  • memory/1716-34-0x000007FEF6A40000-0x000007FEF6A52000-memory.dmp

    Filesize

    72KB

  • memory/1716-33-0x000007FEF4D30000-0x000007FEF4EA0000-memory.dmp

    Filesize

    1.4MB

  • memory/1716-31-0x000007FEF4EA0000-0x000007FEF5018000-memory.dmp

    Filesize

    1.5MB

  • memory/1716-27-0x000007FEF50F0000-0x000007FEF5157000-memory.dmp

    Filesize

    412KB

  • memory/1716-46-0x000007FEF2F00000-0x000007FEF2F75000-memory.dmp

    Filesize

    468KB

  • memory/1716-58-0x000007FEF2030000-0x000007FEF207E000-memory.dmp

    Filesize

    312KB

  • memory/1716-57-0x000007FEF2330000-0x000007FEF2341000-memory.dmp

    Filesize

    68KB

  • memory/1716-60-0x000007FEF1FA0000-0x000007FEF1FD4000-memory.dmp

    Filesize

    208KB

  • memory/1716-40-0x000007FEF30C0000-0x000007FEF4870000-memory.dmp

    Filesize

    23.7MB

  • memory/1716-59-0x000007FEF1FE0000-0x000007FEF2023000-memory.dmp

    Filesize

    268KB

  • memory/1716-56-0x000007FEF24A0000-0x000007FEF2521000-memory.dmp

    Filesize

    516KB

  • memory/1716-55-0x000007FEF2530000-0x000007FEF2577000-memory.dmp

    Filesize

    284KB

  • memory/1716-54-0x000007FEF2580000-0x000007FEF25DD000-memory.dmp

    Filesize

    372KB

  • memory/1716-53-0x000007FEF25E0000-0x000007FEF25F1000-memory.dmp

    Filesize

    68KB

  • memory/1716-51-0x000007FEF29C0000-0x000007FEF2AB4000-memory.dmp

    Filesize

    976KB

  • memory/1716-50-0x000007FEF2AC0000-0x000007FEF2AD3000-memory.dmp

    Filesize

    76KB

  • memory/1716-49-0x000007FEF2B00000-0x000007FEF2B23000-memory.dmp

    Filesize

    140KB

  • memory/1716-48-0x000007FEF2B30000-0x000007FEF2B45000-memory.dmp

    Filesize

    84KB

  • memory/1716-47-0x000007FEF2B50000-0x000007FEF2D6D000-memory.dmp

    Filesize

    2.1MB

  • memory/1716-52-0x000007FEF29A0000-0x000007FEF29B1000-memory.dmp

    Filesize

    68KB

  • memory/1716-45-0x000007FEF2F80000-0x000007FEF3045000-memory.dmp

    Filesize

    788KB

  • memory/1716-44-0x000007FEF3050000-0x000007FEF3066000-memory.dmp

    Filesize

    88KB

  • memory/1716-43-0x000007FEF3070000-0x000007FEF3081000-memory.dmp

    Filesize

    68KB

  • memory/1716-42-0x000007FEF3090000-0x000007FEF30BF000-memory.dmp

    Filesize

    188KB

  • memory/1716-41-0x000007FEF7E60000-0x000007FEF7E70000-memory.dmp

    Filesize

    64KB

  • memory/1716-63-0x000007FEF6410000-0x000007FEF66C4000-memory.dmp

    Filesize

    2.7MB