Analysis

  • max time kernel
    140s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-06-2024 13:24

General

  • Target

    resource/sound/ns_1_03.mp3

  • Size

    22KB

  • MD5

    ecbdb36d82691f7b8bd81d520fcfa156

  • SHA1

    a7aa28a6ca1d704fe209110d6063ad71fa756c35

  • SHA256

    5534a1a106441b64400be52bad51597f7a276e87e89bdcf2a46d0f3cdc4909c0

  • SHA512

    cbb609a2282af935e71226ec358448b6ffb845443271c36000604eab8acc6990a985971abfe902028de471a82c557aa88fcdcfd852f880491b305801908617d6

  • SSDEEP

    384:YaBTIStbuil81ECKigp42Cb0ans7ixMw96QyIk+EkVPfyc9d/fRZ:Y40Wbui6fgkhnXMwYo1xfFXZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\resource\sound\ns_1_03.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2952-6-0x000007FEFAE70000-0x000007FEFAEA4000-memory.dmp
    Filesize

    208KB

  • memory/2952-5-0x000000013F8C0000-0x000000013F9B8000-memory.dmp
    Filesize

    992KB

  • memory/2952-8-0x000007FEFB630000-0x000007FEFB648000-memory.dmp
    Filesize

    96KB

  • memory/2952-9-0x000007FEFB160000-0x000007FEFB177000-memory.dmp
    Filesize

    92KB

  • memory/2952-10-0x000007FEFB0E0000-0x000007FEFB0F1000-memory.dmp
    Filesize

    68KB

  • memory/2952-11-0x000007FEF8140000-0x000007FEF8157000-memory.dmp
    Filesize

    92KB

  • memory/2952-12-0x000007FEF7320000-0x000007FEF7331000-memory.dmp
    Filesize

    68KB

  • memory/2952-14-0x000007FEF72E0000-0x000007FEF72F1000-memory.dmp
    Filesize

    68KB

  • memory/2952-13-0x000007FEF7300000-0x000007FEF731D000-memory.dmp
    Filesize

    116KB

  • memory/2952-7-0x000007FEF6010000-0x000007FEF62C4000-memory.dmp
    Filesize

    2.7MB

  • memory/2952-15-0x000007FEF6A10000-0x000007FEF6C10000-memory.dmp
    Filesize

    2.0MB

  • memory/2952-23-0x000007FEF6660000-0x000007FEF667B000-memory.dmp
    Filesize

    108KB

  • memory/2952-24-0x000007FEF6640000-0x000007FEF6651000-memory.dmp
    Filesize

    68KB

  • memory/2952-18-0x000007FEF69A0000-0x000007FEF69C1000-memory.dmp
    Filesize

    132KB

  • memory/2952-19-0x000007FEF66E0000-0x000007FEF66F8000-memory.dmp
    Filesize

    96KB

  • memory/2952-17-0x000007FEF6700000-0x000007FEF673F000-memory.dmp
    Filesize

    252KB

  • memory/2952-20-0x000007FEF66C0000-0x000007FEF66D1000-memory.dmp
    Filesize

    68KB

  • memory/2952-22-0x000007FEF6680000-0x000007FEF6691000-memory.dmp
    Filesize

    68KB

  • memory/2952-21-0x000007FEF66A0000-0x000007FEF66B1000-memory.dmp
    Filesize

    68KB

  • memory/2952-28-0x000007FEF4E30000-0x000007FEF4E9F000-memory.dmp
    Filesize

    444KB

  • memory/2952-31-0x000007FEF4DD0000-0x000007FEF4DE1000-memory.dmp
    Filesize

    68KB

  • memory/2952-30-0x000007FEF4DF0000-0x000007FEF4E07000-memory.dmp
    Filesize

    92KB

  • memory/2952-29-0x000007FEF4E10000-0x000007FEF4E21000-memory.dmp
    Filesize

    68KB

  • memory/2952-27-0x000007FEF4EA0000-0x000007FEF4F07000-memory.dmp
    Filesize

    412KB

  • memory/2952-32-0x000007FEF4D70000-0x000007FEF4DC7000-memory.dmp
    Filesize

    348KB

  • memory/2952-26-0x000007FEF4F10000-0x000007FEF4F40000-memory.dmp
    Filesize

    192KB

  • memory/2952-25-0x000007FEF4F40000-0x000007FEF4F58000-memory.dmp
    Filesize

    96KB

  • memory/2952-33-0x000007FEF4D40000-0x000007FEF4D6F000-memory.dmp
    Filesize

    188KB

  • memory/2952-34-0x000007FEF4D20000-0x000007FEF4D33000-memory.dmp
    Filesize

    76KB

  • memory/2952-35-0x000007FEF4D00000-0x000007FEF4D11000-memory.dmp
    Filesize

    68KB

  • memory/2952-36-0x000007FEF4C30000-0x000007FEF4CF5000-memory.dmp
    Filesize

    788KB

  • memory/2952-40-0x000007FEF2E20000-0x000007FEF2E32000-memory.dmp
    Filesize

    72KB

  • memory/2952-39-0x000007FEF2E60000-0x000007FEF2E71000-memory.dmp
    Filesize

    68KB

  • memory/2952-38-0x000007FEF3050000-0x000007FEF3078000-memory.dmp
    Filesize

    160KB

  • memory/2952-37-0x000007FEF3080000-0x000007FEF30D6000-memory.dmp
    Filesize

    344KB

  • memory/2952-41-0x000007FEF2CA0000-0x000007FEF2E1A000-memory.dmp
    Filesize

    1.5MB

  • memory/2952-16-0x000007FEF4F60000-0x000007FEF600B000-memory.dmp
    Filesize

    16.7MB