89ffa81135a2c1897e0231462cbaef78a62956db40590ae11cadc5b7b6cd59e6

Analysis

max time kernel
591s
max time network
361s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
27/05/2024, 12:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

.minecraft/resources/music/calm1.ogg
Size

2.4MB
MD5

3c5b792652b43e9876b7e7b19c0b376b
SHA1

50a59a4f56e4046701b758ddbb1c1587efa4cadf
SHA256

e4a8945cceea9765b5541617423404cc48069cab2bce34bb44e76c1413ae26e5
SHA512

09189f6a40dcb15253d0290b1ad5906134af3300d0a9accea1efd9ac7b23c2ebc0ac5415d02d9afae4762c749dc8adbf97757581e0aec07c552c57b4d1a2436e
SSDEEP

49152:TR5hdNOndHp00tBoFquscNANpe71EwCRxCpJndHNJk5JBrp4AQBrZvJvqtwiGX:TR5hdNOdHp00LoLCpe71EfxwdH45JBrk

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2192	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2192	vlc.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	2192	vlc.exe
Token: SeIncBasePriorityPrivilege	2192	vlc.exe

Suspicious use of FindShellTrayWindow 8 IoCs

pid	Process
2192	vlc.exe
2192	vlc.exe
2192	vlc.exe
2192	vlc.exe
2192	vlc.exe
2192	vlc.exe
2192	vlc.exe
2192	vlc.exe

Suspicious use of SendNotifyMessage 7 IoCs

pid	Process
2192	vlc.exe
2192	vlc.exe
2192	vlc.exe
2192	vlc.exe
2192	vlc.exe
2192	vlc.exe
2192	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2192	vlc.exe

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\.minecraft\resources\music\calm1.ogg"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2192-5-0x000000013F8C0000-0x000000013F9B8000-memory.dmp

Filesize
992KB

Download
memory/2192-6-0x000007FEF77B0000-0x000007FEF77E4000-memory.dmp

Filesize
208KB

Download
memory/2192-10-0x000007FEF7770000-0x000007FEF7781000-memory.dmp

Filesize
68KB

Download
memory/2192-13-0x000007FEF6B80000-0x000007FEF6B9D000-memory.dmp

Filesize
116KB

Download
memory/2192-14-0x000007FEF6B60000-0x000007FEF6B71000-memory.dmp

Filesize
68KB

Download
memory/2192-7-0x000007FEF5F60000-0x000007FEF6216000-memory.dmp

Filesize
2.7MB

Download
memory/2192-12-0x000007FEF6BA0000-0x000007FEF6BB1000-memory.dmp

Filesize
68KB

Download
memory/2192-11-0x000007FEF6BC0000-0x000007FEF6BD7000-memory.dmp

Filesize
92KB

Download
memory/2192-9-0x000007FEF7820000-0x000007FEF7837000-memory.dmp

Filesize
92KB

Download
memory/2192-8-0x000007FEFB6D0000-0x000007FEFB6E8000-memory.dmp

Filesize
96KB

Download
memory/2192-17-0x000007FEF6730000-0x000007FEF6771000-memory.dmp

Filesize
260KB

Download
memory/2192-18-0x000007FEF6670000-0x000007FEF6691000-memory.dmp

Filesize
132KB

Download
memory/2192-27-0x000007FEF4C00000-0x000007FEF4C67000-memory.dmp

Filesize
412KB

Download
memory/2192-26-0x000007FEF4C70000-0x000007FEF4CA0000-memory.dmp

Filesize
192KB

Download
memory/2192-25-0x000007FEF65B0000-0x000007FEF65C8000-memory.dmp

Filesize
96KB

Download
memory/2192-24-0x000007FEF65D0000-0x000007FEF65E1000-memory.dmp

Filesize
68KB

Download
memory/2192-23-0x000007FEF65F0000-0x000007FEF660B000-memory.dmp

Filesize
108KB

Download
memory/2192-22-0x000007FEF6610000-0x000007FEF6621000-memory.dmp

Filesize
68KB

Download
memory/2192-28-0x000007FEF4B80000-0x000007FEF4BFC000-memory.dmp

Filesize
496KB

Download
memory/2192-21-0x000007FEF6630000-0x000007FEF6641000-memory.dmp

Filesize
68KB

Download
memory/2192-38-0x000007FEF4820000-0x000007FEF4835000-memory.dmp

Filesize
84KB

Download
memory/2192-34-0x000007FEF4950000-0x000007FEF497F000-memory.dmp

Filesize
188KB

Download
memory/2192-40-0x000007FEF47C0000-0x000007FEF47D2000-memory.dmp

Filesize
72KB

Download
memory/2192-39-0x000007FEF47E0000-0x000007FEF47F1000-memory.dmp

Filesize
68KB

Download
memory/2192-37-0x000007FEF4840000-0x000007FEF4905000-memory.dmp

Filesize
788KB

Download
memory/2192-41-0x000007FEF4640000-0x000007FEF47BA000-memory.dmp

Filesize
1.5MB

Download
memory/2192-36-0x000007FEF4910000-0x000007FEF4926000-memory.dmp

Filesize
88KB

Download
memory/2192-35-0x000007FEF4930000-0x000007FEF4941000-memory.dmp

Filesize
68KB

Download
memory/2192-33-0x000007FEF7810000-0x000007FEF7820000-memory.dmp

Filesize
64KB

Download
memory/2192-32-0x000007FEF4980000-0x000007FEF4997000-memory.dmp

Filesize
92KB

Download
memory/2192-31-0x000007FEF49A0000-0x000007FEF4B20000-memory.dmp

Filesize
1.5MB

Download
memory/2192-30-0x000007FEF4B20000-0x000007FEF4B7C000-memory.dmp

Filesize
368KB

Download
memory/2192-15-0x000007FEF4EB0000-0x000007FEF5F60000-memory.dmp

Filesize
16.7MB

Download
memory/2192-29-0x000007FEF6590000-0x000007FEF65A1000-memory.dmp

Filesize
68KB

Download
memory/2192-16-0x000007FEF4CA0000-0x000007FEF4EAB000-memory.dmp

Filesize
2.0MB

Download
memory/2192-20-0x000007FEF6650000-0x000007FEF6661000-memory.dmp

Filesize
68KB

Download
memory/2192-19-0x000007FEF6710000-0x000007FEF6728000-memory.dmp

Filesize
96KB

Download