Analysis
-
max time kernel
290s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
12-06-2024 20:14
Static task
static1
Behavioral task
behavioral1
Sample
clip_12.mp4
Resource
win7-20240611-en
windows7-x64
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
clip_12.mp4
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
300 seconds
General
-
Target
clip_12.mp4
-
Size
62.6MB
-
MD5
c790f7e78bc06de9b8c1e23e5be7c822
-
SHA1
a9d73b1901fe9a39b8945fa4299af11416f48eb6
-
SHA256
008edfc7f5ddee99f159ce144bfea2d812827e79aebe6b2a8e9c997876b280a5
-
SHA512
2ef762f374a9ea3f26872475b134dd7317f25c8d050798f856771562875352aa3849a1c4811703f32095ebb86da31a5cbb20b4a7b1f7ba18d17581f37804dce3
-
SSDEEP
1572864:sDy3/lM5Z4BynOjorIBWfO+1QI5PD8eDMIqvR2+kk2wzycGDoehfDIiIFw:sDpTMynOjorISO+P7VDMZ2C2wFGDuhw
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2436 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2436 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2436 vlc.exe Token: SeIncBasePriorityPrivilege 2436 vlc.exe -
Suspicious use of FindShellTrayWindow 27 IoCs
pid Process 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe 2436 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2436 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\clip_12.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2436