Analysis

  • max time kernel
    591s
  • max time network
    360s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    27-05-2024 12:36

General

  • Target

    .minecraft/resources/newmusic/piano1.ogg

  • Size

    530KB

  • MD5

    23eb40576faa108751c379f72e555d99

  • SHA1

    0f374764aafba398f4ba90dba05a53a9e6166138

  • SHA256

    0bfc170ab3395cbd55307cb38314713c3eed442fe35acb7299d052a11c967387

  • SHA512

    7be045580ebdc09fc5f1f13481a5568d43068dd63507d660bfd82f4514ab22781a988e7059b30efd63aedf281c17e69dd5b8a090702af827eaf8901e5d1bc080

  • SSDEEP

    12288:/14STAEM0SSpEaWJPwesGCEdn86t2wRQzHj5:/Qwcweskd8C2wO/5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\.minecraft\resources\newmusic\piano1.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2904-6-0x000007FEF7B30000-0x000007FEF7B64000-memory.dmp

    Filesize

    208KB

  • memory/2904-5-0x000000013F140000-0x000000013F238000-memory.dmp

    Filesize

    992KB

  • memory/2904-12-0x000007FEF6D10000-0x000007FEF6D21000-memory.dmp

    Filesize

    68KB

  • memory/2904-7-0x000007FEF5A80000-0x000007FEF5D34000-memory.dmp

    Filesize

    2.7MB

  • memory/2904-14-0x000007FEF61A0000-0x000007FEF61B1000-memory.dmp

    Filesize

    68KB

  • memory/2904-13-0x000007FEF6CF0000-0x000007FEF6D0D000-memory.dmp

    Filesize

    116KB

  • memory/2904-11-0x000007FEF6D30000-0x000007FEF6D47000-memory.dmp

    Filesize

    92KB

  • memory/2904-10-0x000007FEF7B10000-0x000007FEF7B21000-memory.dmp

    Filesize

    68KB

  • memory/2904-9-0x000007FEFA340000-0x000007FEFA357000-memory.dmp

    Filesize

    92KB

  • memory/2904-8-0x000007FEFAF40000-0x000007FEFAF58000-memory.dmp

    Filesize

    96KB

  • memory/2904-16-0x000007FEF47D0000-0x000007FEF49D0000-memory.dmp

    Filesize

    2.0MB

  • memory/2904-27-0x000007FEF46D0000-0x000007FEF4737000-memory.dmp

    Filesize

    412KB

  • memory/2904-26-0x000007FEF4740000-0x000007FEF4770000-memory.dmp

    Filesize

    192KB

  • memory/2904-30-0x000007FEF45E0000-0x000007FEF463C000-memory.dmp

    Filesize

    368KB

  • memory/2904-29-0x000007FEF4640000-0x000007FEF4651000-memory.dmp

    Filesize

    68KB

  • memory/2904-28-0x000007FEF4660000-0x000007FEF46CF000-memory.dmp

    Filesize

    444KB

  • memory/2904-39-0x000007FEF4280000-0x000007FEF4292000-memory.dmp

    Filesize

    72KB

  • memory/2904-38-0x000007FEF42C0000-0x000007FEF42D1000-memory.dmp

    Filesize

    68KB

  • memory/2904-15-0x000007FEF49D0000-0x000007FEF5A7B000-memory.dmp

    Filesize

    16.7MB

  • memory/2904-40-0x000007FEF4100000-0x000007FEF427A000-memory.dmp

    Filesize

    1.5MB

  • memory/2904-37-0x000007FEF4300000-0x000007FEF43C5000-memory.dmp

    Filesize

    788KB

  • memory/2904-36-0x000007FEF43D0000-0x000007FEF43E6000-memory.dmp

    Filesize

    88KB

  • memory/2904-35-0x000007FEF43F0000-0x000007FEF4401000-memory.dmp

    Filesize

    68KB

  • memory/2904-34-0x000007FEF4410000-0x000007FEF443F000-memory.dmp

    Filesize

    188KB

  • memory/2904-33-0x000007FEFA330000-0x000007FEFA340000-memory.dmp

    Filesize

    64KB

  • memory/2904-32-0x000007FEF4440000-0x000007FEF4457000-memory.dmp

    Filesize

    92KB

  • memory/2904-31-0x000007FEF4460000-0x000007FEF45D8000-memory.dmp

    Filesize

    1.5MB

  • memory/2904-25-0x000007FEF4770000-0x000007FEF4788000-memory.dmp

    Filesize

    96KB

  • memory/2904-24-0x000007FEF4790000-0x000007FEF47A1000-memory.dmp

    Filesize

    68KB

  • memory/2904-23-0x000007FEF47B0000-0x000007FEF47CB000-memory.dmp

    Filesize

    108KB

  • memory/2904-22-0x000007FEF60B0000-0x000007FEF60C1000-memory.dmp

    Filesize

    68KB

  • memory/2904-21-0x000007FEF60D0000-0x000007FEF60E1000-memory.dmp

    Filesize

    68KB

  • memory/2904-20-0x000007FEF60F0000-0x000007FEF6101000-memory.dmp

    Filesize

    68KB

  • memory/2904-19-0x000007FEF6110000-0x000007FEF6128000-memory.dmp

    Filesize

    96KB

  • memory/2904-18-0x000007FEF6130000-0x000007FEF6151000-memory.dmp

    Filesize

    132KB

  • memory/2904-17-0x000007FEF6160000-0x000007FEF619F000-memory.dmp

    Filesize

    252KB