Resubmissions

12-06-2024 20:14

240612-y1f3hsydla 6

12-06-2024 20:12

240612-yy42kaycqe 6

Analysis

  • max time kernel
    290s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12-06-2024 20:14

General

  • Target

    clip_12.mp4

  • Size

    62.6MB

  • MD5

    c790f7e78bc06de9b8c1e23e5be7c822

  • SHA1

    a9d73b1901fe9a39b8945fa4299af11416f48eb6

  • SHA256

    008edfc7f5ddee99f159ce144bfea2d812827e79aebe6b2a8e9c997876b280a5

  • SHA512

    2ef762f374a9ea3f26872475b134dd7317f25c8d050798f856771562875352aa3849a1c4811703f32095ebb86da31a5cbb20b4a7b1f7ba18d17581f37804dce3

  • SSDEEP

    1572864:sDy3/lM5Z4BynOjorIBWfO+1QI5PD8eDMIqvR2+kk2wzycGDoehfDIiIFw:sDpTMynOjorISO+P7VDMZ2C2wFGDuhw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 27 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\clip_12.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2436-6-0x000007FEF7810000-0x000007FEF7844000-memory.dmp

    Filesize

    208KB

  • memory/2436-5-0x000000013F340000-0x000000013F438000-memory.dmp

    Filesize

    992KB

  • memory/2436-8-0x000007FEFBD80000-0x000007FEFBD98000-memory.dmp

    Filesize

    96KB

  • memory/2436-9-0x000007FEF7AB0000-0x000007FEF7AC7000-memory.dmp

    Filesize

    92KB

  • memory/2436-10-0x000007FEF7880000-0x000007FEF7891000-memory.dmp

    Filesize

    68KB

  • memory/2436-14-0x000007FEF6C70000-0x000007FEF6C81000-memory.dmp

    Filesize

    68KB

  • memory/2436-7-0x000007FEF5FC0000-0x000007FEF6276000-memory.dmp

    Filesize

    2.7MB

  • memory/2436-13-0x000007FEF6C90000-0x000007FEF6CAD000-memory.dmp

    Filesize

    116KB

  • memory/2436-12-0x000007FEF6CB0000-0x000007FEF6CC1000-memory.dmp

    Filesize

    68KB

  • memory/2436-11-0x000007FEF77D0000-0x000007FEF77E7000-memory.dmp

    Filesize

    92KB

  • memory/2436-30-0x000007FEF4BB0000-0x000007FEF4C07000-memory.dmp

    Filesize

    348KB

  • memory/2436-29-0x000007FEF65F0000-0x000007FEF6601000-memory.dmp

    Filesize

    68KB

  • memory/2436-28-0x000007FEF4C10000-0x000007FEF4C8C000-memory.dmp

    Filesize

    496KB

  • memory/2436-27-0x000007FEF4C90000-0x000007FEF4CF7000-memory.dmp

    Filesize

    412KB

  • memory/2436-26-0x000007FEF6610000-0x000007FEF6640000-memory.dmp

    Filesize

    192KB

  • memory/2436-25-0x000007FEF6640000-0x000007FEF6658000-memory.dmp

    Filesize

    96KB

  • memory/2436-24-0x000007FEF6660000-0x000007FEF6671000-memory.dmp

    Filesize

    68KB

  • memory/2436-23-0x000007FEF6680000-0x000007FEF669B000-memory.dmp

    Filesize

    108KB

  • memory/2436-22-0x000007FEF66A0000-0x000007FEF66B1000-memory.dmp

    Filesize

    68KB

  • memory/2436-21-0x000007FEF66C0000-0x000007FEF66D1000-memory.dmp

    Filesize

    68KB

  • memory/2436-20-0x000007FEF66E0000-0x000007FEF66F1000-memory.dmp

    Filesize

    68KB

  • memory/2436-19-0x000007FEF6770000-0x000007FEF6788000-memory.dmp

    Filesize

    96KB

  • memory/2436-18-0x000007FEF6C40000-0x000007FEF6C61000-memory.dmp

    Filesize

    132KB

  • memory/2436-17-0x000007FEF6790000-0x000007FEF67D1000-memory.dmp

    Filesize

    260KB

  • memory/2436-16-0x000007FEF4D00000-0x000007FEF4F0B000-memory.dmp

    Filesize

    2.0MB

  • memory/2436-31-0x000007FEF4A30000-0x000007FEF4BB0000-memory.dmp

    Filesize

    1.5MB

  • memory/2436-32-0x000007FEF4A10000-0x000007FEF4A27000-memory.dmp

    Filesize

    92KB

  • memory/2436-15-0x000007FEF4F10000-0x000007FEF5FC0000-memory.dmp

    Filesize

    16.7MB

  • memory/2436-38-0x000007FEF2D60000-0x000007FEF2ECB000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-37-0x000007FEF2ED0000-0x000007FEF2F1D000-memory.dmp

    Filesize

    308KB

  • memory/2436-39-0x000007FEF2D00000-0x000007FEF2D57000-memory.dmp

    Filesize

    348KB

  • memory/2436-34-0x000007FEF2F90000-0x000007FEF3196000-memory.dmp

    Filesize

    2.0MB

  • memory/2436-36-0x000007FEF2F20000-0x000007FEF2F62000-memory.dmp

    Filesize

    264KB

  • memory/2436-44-0x000007FEF2A40000-0x000007FEF2A56000-memory.dmp

    Filesize

    88KB

  • memory/2436-43-0x000007FEF2A60000-0x000007FEF2A71000-memory.dmp

    Filesize

    68KB

  • memory/2436-40-0x000007FEF2AB0000-0x000007FEF2CF1000-memory.dmp

    Filesize

    2.3MB

  • memory/2436-42-0x000007FEF2A80000-0x000007FEF2AAF000-memory.dmp

    Filesize

    188KB

  • memory/2436-41-0x000007FEF7870000-0x000007FEF7880000-memory.dmp

    Filesize

    64KB

  • memory/2436-35-0x000007FEF2F70000-0x000007FEF2F82000-memory.dmp

    Filesize

    72KB

  • memory/2436-33-0x000007FEF31A0000-0x000007FEF4A0F000-memory.dmp

    Filesize

    24.4MB

  • memory/2436-47-0x000007FEF28B0000-0x000007FEF2912000-memory.dmp

    Filesize

    392KB

  • memory/2436-46-0x000007FEF2920000-0x000007FEF2962000-memory.dmp

    Filesize

    264KB

  • memory/2436-45-0x000007FEF2970000-0x000007FEF2A35000-memory.dmp

    Filesize

    788KB

  • memory/2436-48-0x000007FEF24E0000-0x000007FEF2790000-memory.dmp

    Filesize

    2.7MB

  • memory/2436-50-0x000007FEF2480000-0x000007FEF2492000-memory.dmp

    Filesize

    72KB

  • memory/2436-49-0x000007FEF24A0000-0x000007FEF24B1000-memory.dmp

    Filesize

    68KB

  • memory/2436-54-0x000007FEF2410000-0x000007FEF2423000-memory.dmp

    Filesize

    76KB

  • memory/2436-53-0x000007FEF2430000-0x000007FEF2453000-memory.dmp

    Filesize

    140KB

  • memory/2436-52-0x000007FEF2460000-0x000007FEF2475000-memory.dmp

    Filesize

    84KB

  • memory/2436-55-0x000007FEF2300000-0x000007FEF2406000-memory.dmp

    Filesize

    1.0MB

  • memory/2436-57-0x000007FEF1F60000-0x000007FEF1F71000-memory.dmp

    Filesize

    68KB

  • memory/2436-56-0x000007FEF2130000-0x000007FEF215A000-memory.dmp

    Filesize

    168KB

  • memory/2436-51-0x000007FEF2160000-0x000007FEF22DA000-memory.dmp

    Filesize

    1.5MB

  • memory/2436-58-0x000007FEF1EF0000-0x000007FEF1F51000-memory.dmp

    Filesize

    388KB

  • memory/2436-59-0x000007FEF1EA0000-0x000007FEF1EE7000-memory.dmp

    Filesize

    284KB

  • memory/2436-60-0x000007FEF1E20000-0x000007FEF1E94000-memory.dmp

    Filesize

    464KB

  • memory/2436-61-0x000007FEF1CB0000-0x000007FEF1CC1000-memory.dmp

    Filesize

    68KB

  • memory/2436-62-0x000007FEEFD90000-0x000007FEEFDDE000-memory.dmp

    Filesize

    312KB

  • memory/2436-64-0x000007FEEFCF0000-0x000007FEEFD24000-memory.dmp

    Filesize

    208KB

  • memory/2436-63-0x000007FEEFD30000-0x000007FEEFD87000-memory.dmp

    Filesize

    348KB