89ffa81135a2c1897e0231462cbaef78a62956db40590ae11cadc5b7b6cd59e6

Analysis

max time kernel
591s
max time network
363s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
27/05/2024, 12:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

.minecraft/resources/newmusic/hal1.ogg
Size

1.9MB
MD5

dc9b5348e613189736447b92b3f991ab
SHA1

df1ff11b79757432c5c3f279e5ecde7b63ceda64
SHA256

8ccf58af8af93a6dc97ac0f8c05dedaee0b7ee7e555cf4f75d973c47bea4994d
SHA512

bb9108ec6ab88a487cec2219a7528e8c51b948f755064a85dd36814fb5f310ad9eadb9a3fb36fa178767d29fdd82a1963ab022363b5dba9f53929d8c32e30058
SSDEEP

49152:urCCCBpz4gTt8pKph81td9DJGVDQrIhrJA7O/UwF4FnRyNYHIHX+2zX:BCE4y6Sh81t5GZQr0AiMweRnHAX+2b

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
1936	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1936	vlc.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	1936	vlc.exe
Token: SeIncBasePriorityPrivilege	1936	vlc.exe

Suspicious use of FindShellTrayWindow 9 IoCs

pid	Process
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe

Suspicious use of SendNotifyMessage 8 IoCs

pid	Process
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe
1936	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1936	vlc.exe

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\.minecraft\resources\newmusic\hal1.ogg"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1936-6-0x000007FEF7E70000-0x000007FEF7EA4000-memory.dmp

Filesize
208KB

Download
memory/1936-5-0x000000013F530000-0x000000013F628000-memory.dmp

Filesize
992KB

Download
memory/1936-8-0x000007FEFB280000-0x000007FEFB298000-memory.dmp

Filesize
96KB

Download
memory/1936-14-0x000007FEF64E0000-0x000007FEF64F1000-memory.dmp

Filesize
68KB

Download
memory/1936-13-0x000007FEF6FA0000-0x000007FEF6FBD000-memory.dmp

Filesize
116KB

Download
memory/1936-12-0x000007FEF6FC0000-0x000007FEF6FD1000-memory.dmp

Filesize
68KB

Download
memory/1936-11-0x000007FEF6FE0000-0x000007FEF6FF7000-memory.dmp

Filesize
92KB

Download
memory/1936-7-0x000007FEF5DC0000-0x000007FEF6076000-memory.dmp

Filesize
2.7MB

Download
memory/1936-10-0x000007FEF7E50000-0x000007FEF7E61000-memory.dmp

Filesize
68KB

Download
memory/1936-9-0x000007FEFA680000-0x000007FEFA697000-memory.dmp

Filesize
92KB

Download
memory/1936-15-0x000007FEF5BB0000-0x000007FEF5DBB000-memory.dmp

Filesize
2.0MB

Download
memory/1936-25-0x000007FEF4A80000-0x000007FEF4A98000-memory.dmp

Filesize
96KB

Download
memory/1936-27-0x000007FEF49E0000-0x000007FEF4A47000-memory.dmp

Filesize
412KB

Download
memory/1936-16-0x000007FEF4B00000-0x000007FEF5BB0000-memory.dmp

Filesize
16.7MB

Download
memory/1936-34-0x000007FEF4710000-0x000007FEF473F000-memory.dmp

Filesize
188KB

Download
memory/1936-36-0x000007FEF46D0000-0x000007FEF46E6000-memory.dmp

Filesize
88KB

Download
memory/1936-31-0x000007FEF4760000-0x000007FEF48E0000-memory.dmp

Filesize
1.5MB

Download
memory/1936-35-0x000007FEF46F0000-0x000007FEF4701000-memory.dmp

Filesize
68KB

Download
memory/1936-33-0x000007FEFA670000-0x000007FEFA680000-memory.dmp

Filesize
64KB

Download
memory/1936-38-0x000007FEF45A0000-0x000007FEF45B1000-memory.dmp

Filesize
68KB

Download
memory/1936-39-0x000007FEF4580000-0x000007FEF4592000-memory.dmp

Filesize
72KB

Download
memory/1936-37-0x000007FEF4600000-0x000007FEF46C5000-memory.dmp

Filesize
788KB

Download
memory/1936-32-0x000007FEF4740000-0x000007FEF4757000-memory.dmp

Filesize
92KB

Download
memory/1936-30-0x000007FEF48E0000-0x000007FEF493C000-memory.dmp

Filesize
368KB

Download
memory/1936-29-0x000007FEF4940000-0x000007FEF4951000-memory.dmp

Filesize
68KB

Download
memory/1936-28-0x000007FEF4960000-0x000007FEF49DC000-memory.dmp

Filesize
496KB

Download
memory/1936-26-0x000007FEF4A50000-0x000007FEF4A80000-memory.dmp

Filesize
192KB

Download
memory/1936-24-0x000007FEF4AA0000-0x000007FEF4AB1000-memory.dmp

Filesize
68KB

Download
memory/1936-23-0x000007FEF4AC0000-0x000007FEF4ADB000-memory.dmp

Filesize
108KB

Download
memory/1936-22-0x000007FEF4AE0000-0x000007FEF4AF1000-memory.dmp

Filesize
68KB

Download
memory/1936-21-0x000007FEF6400000-0x000007FEF6411000-memory.dmp

Filesize
68KB

Download
memory/1936-20-0x000007FEF6420000-0x000007FEF6431000-memory.dmp

Filesize
68KB

Download
memory/1936-19-0x000007FEF6440000-0x000007FEF6458000-memory.dmp

Filesize
96KB

Download
memory/1936-18-0x000007FEF6460000-0x000007FEF6481000-memory.dmp

Filesize
132KB

Download
memory/1936-17-0x000007FEF6490000-0x000007FEF64D1000-memory.dmp

Filesize
260KB

Download
memory/1936-40-0x000007FEF4400000-0x000007FEF457A000-memory.dmp

Filesize
1.5MB

Download