Analysis

  • max time kernel
    1790s
  • max time network
    1562s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 12:15

General

  • Target

    Россич дай черепаху.mp4

  • Size

    2.1MB

  • MD5

    70bd2305458e17881abe099f5a66de14

  • SHA1

    ae3a4af43c50bb808fa09be350f217cd35a058a4

  • SHA256

    cb7fedf2da66d8f6500554177d6a79219e9334941f13295aab0ef2174eb87dfe

  • SHA512

    cce762ee41f22fb01228bd85922ca756f41218ffbae720c12ebf1b6cd4c64dee39894cfe2b9a411e6b1e0e1aebcbe053f029991a1916f9ff39d15446188140ef

  • SSDEEP

    49152:ePM8Q1y+e6XQFojMbISMatQICE6qUnN11+9aXQHYwY:et9qMEDubUN1YUgHYr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 27 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Россич дай черепаху.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2904

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2904-6-0x000007FEFA4E0000-0x000007FEFA514000-memory.dmp

          Filesize

          208KB

        • memory/2904-5-0x000000013F6B0000-0x000000013F7A8000-memory.dmp

          Filesize

          992KB

        • memory/2904-10-0x000007FEF7D30000-0x000007FEF7D41000-memory.dmp

          Filesize

          68KB

        • memory/2904-13-0x000007FEF6ED0000-0x000007FEF6EED000-memory.dmp

          Filesize

          116KB

        • memory/2904-12-0x000007FEF6EF0000-0x000007FEF6F01000-memory.dmp

          Filesize

          68KB

        • memory/2904-11-0x000007FEF6F10000-0x000007FEF6F27000-memory.dmp

          Filesize

          92KB

        • memory/2904-7-0x000007FEF5CA0000-0x000007FEF5F54000-memory.dmp

          Filesize

          2.7MB

        • memory/2904-9-0x000007FEFA530000-0x000007FEFA547000-memory.dmp

          Filesize

          92KB

        • memory/2904-8-0x000007FEFB320000-0x000007FEFB338000-memory.dmp

          Filesize

          96KB

        • memory/2904-15-0x000007FEF63C0000-0x000007FEF63D1000-memory.dmp

          Filesize

          68KB

        • memory/2904-20-0x000007FEF62F0000-0x000007FEF6301000-memory.dmp

          Filesize

          68KB

        • memory/2904-23-0x000007FEF5A60000-0x000007FEF5A71000-memory.dmp

          Filesize

          68KB

        • memory/2904-22-0x000007FEF5A80000-0x000007FEF5A9B000-memory.dmp

          Filesize

          108KB

        • memory/2904-24-0x000007FEF5A40000-0x000007FEF5A58000-memory.dmp

          Filesize

          96KB

        • memory/2904-25-0x000007FEF5A10000-0x000007FEF5A40000-memory.dmp

          Filesize

          192KB

        • memory/2904-21-0x000007FEF62D0000-0x000007FEF62E1000-memory.dmp

          Filesize

          68KB

        • memory/2904-14-0x000007FEF5AA0000-0x000007FEF5CA0000-memory.dmp

          Filesize

          2.0MB

        • memory/2904-19-0x000007FEF6310000-0x000007FEF6321000-memory.dmp

          Filesize

          68KB

        • memory/2904-18-0x000007FEF6330000-0x000007FEF6348000-memory.dmp

          Filesize

          96KB

        • memory/2904-17-0x000007FEF6350000-0x000007FEF6371000-memory.dmp

          Filesize

          132KB

        • memory/2904-16-0x000007FEF6380000-0x000007FEF63BF000-memory.dmp

          Filesize

          252KB

        • memory/2904-27-0x000007FEF48F0000-0x000007FEF4957000-memory.dmp

          Filesize

          412KB

        • memory/2904-30-0x000007FEF4800000-0x000007FEF4856000-memory.dmp

          Filesize

          344KB

        • memory/2904-29-0x000007FEF4860000-0x000007FEF4871000-memory.dmp

          Filesize

          68KB

        • memory/2904-32-0x000007FEF4660000-0x000007FEF4677000-memory.dmp

          Filesize

          92KB

        • memory/2904-35-0x000007FEF4480000-0x000007FEF44C2000-memory.dmp

          Filesize

          264KB

        • memory/2904-38-0x000007FEF4260000-0x000007FEF42B7000-memory.dmp

          Filesize

          348KB

        • memory/2904-37-0x000007FEF42C0000-0x000007FEF442B000-memory.dmp

          Filesize

          1.4MB

        • memory/2904-26-0x000007FEF4960000-0x000007FEF5A0B000-memory.dmp

          Filesize

          16.7MB

        • memory/2904-36-0x000007FEF4430000-0x000007FEF447C000-memory.dmp

          Filesize

          304KB

        • memory/2904-34-0x000007FEF44D0000-0x000007FEF44E2000-memory.dmp

          Filesize

          72KB

        • memory/2904-33-0x000007FEF44F0000-0x000007FEF4660000-memory.dmp

          Filesize

          1.4MB

        • memory/2904-39-0x000007FEF4010000-0x000007FEF425B000-memory.dmp

          Filesize

          2.3MB

        • memory/2904-31-0x000007FEF4680000-0x000007FEF47F8000-memory.dmp

          Filesize

          1.5MB

        • memory/2904-28-0x000007FEF4880000-0x000007FEF48EF000-memory.dmp

          Filesize

          444KB

        • memory/2904-42-0x000007FEF2830000-0x000007FEF285F000-memory.dmp

          Filesize

          188KB

        • memory/2904-43-0x000007FEF2810000-0x000007FEF2821000-memory.dmp

          Filesize

          68KB

        • memory/2904-44-0x000007FEF27F0000-0x000007FEF2806000-memory.dmp

          Filesize

          88KB

        • memory/2904-46-0x000007FEF26A0000-0x000007FEF2715000-memory.dmp

          Filesize

          468KB

        • memory/2904-60-0x000007FEF13C0000-0x000007FEF13F4000-memory.dmp

          Filesize

          208KB

        • memory/2904-59-0x000007FEF1400000-0x000007FEF1443000-memory.dmp

          Filesize

          268KB

        • memory/2904-40-0x000007FEF2860000-0x000007FEF4010000-memory.dmp

          Filesize

          23.7MB

        • memory/2904-58-0x000007FEF1450000-0x000007FEF149E000-memory.dmp

          Filesize

          312KB

        • memory/2904-57-0x000007FEF14C0000-0x000007FEF14D1000-memory.dmp

          Filesize

          68KB

        • memory/2904-56-0x000007FEF18A0000-0x000007FEF1921000-memory.dmp

          Filesize

          516KB

        • memory/2904-55-0x000007FEF1A30000-0x000007FEF1A77000-memory.dmp

          Filesize

          284KB

        • memory/2904-54-0x000007FEF1A80000-0x000007FEF1ADD000-memory.dmp

          Filesize

          372KB

        • memory/2904-53-0x000007FEF1AE0000-0x000007FEF1AF1000-memory.dmp

          Filesize

          68KB

        • memory/2904-52-0x000007FEF20C0000-0x000007FEF20E3000-memory.dmp

          Filesize

          140KB

        • memory/2904-51-0x000007FEF20F0000-0x000007FEF226A000-memory.dmp

          Filesize

          1.5MB

        • memory/2904-50-0x000007FEF2270000-0x000007FEF2282000-memory.dmp

          Filesize

          72KB

        • memory/2904-49-0x000007FEF2290000-0x000007FEF22A1000-memory.dmp

          Filesize

          68KB

        • memory/2904-48-0x000007FEF22B0000-0x000007FEF22C5000-memory.dmp

          Filesize

          84KB

        • memory/2904-47-0x000007FEF22F0000-0x000007FEF250D000-memory.dmp

          Filesize

          2.1MB

        • memory/2904-45-0x000007FEF2720000-0x000007FEF27E5000-memory.dmp

          Filesize

          788KB

        • memory/2904-41-0x000007FEFA7F0000-0x000007FEFA800000-memory.dmp

          Filesize

          64KB