Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
15-06-2024 19:35
Static task
static1
Behavioral task
behavioral1
Sample
video_2024-06-06_21-58-03.avi
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
video_2024-06-06_21-58-03.avi
Resource
win10v2004-20240611-en
General
-
Target
video_2024-06-06_21-58-03.avi
-
Size
4.7MB
-
MD5
0d48316b4771db2b698e7343de2f9fdb
-
SHA1
78cbacc996628e6c54a689aade365a5ccee9d7cd
-
SHA256
39f13b867408e02352716b6f29226c54588d7585b0d641ee2aa377d4d9f4dc77
-
SHA512
f58f15b8859819c6f5f00fb3be8aad3b094e4cc8f7c468b8fb52565f0723ad4fce33f77241e70a2474d3ff0f43e1f78a121299c4d110b36924e5a7e065caf7ee
-
SSDEEP
98304:BuCc19KxWiwGKHCOhUU8BrCs2IOre1L/rD:BupeWnOf99/n
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
vlc.exepid process 2240 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
vlc.exepid process 2240 vlc.exe -
Suspicious use of FindShellTrayWindow 9 IoCs
Processes:
vlc.exepid process 2240 vlc.exe 2240 vlc.exe 2240 vlc.exe 2240 vlc.exe 2240 vlc.exe 2240 vlc.exe 2240 vlc.exe 2240 vlc.exe 2240 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
Processes:
vlc.exepid process 2240 vlc.exe 2240 vlc.exe 2240 vlc.exe 2240 vlc.exe 2240 vlc.exe 2240 vlc.exe 2240 vlc.exe 2240 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
vlc.exepid process 2240 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\video_2024-06-06_21-58-03.avi"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2240
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2240-6-0x000007FEF8270000-0x000007FEF82A4000-memory.dmpFilesize
208KB
-
memory/2240-5-0x000000013F6A0000-0x000000013F798000-memory.dmpFilesize
992KB
-
memory/2240-8-0x000007FEFBDE0000-0x000007FEFBDF8000-memory.dmpFilesize
96KB
-
memory/2240-11-0x000007FEF8070000-0x000007FEF8087000-memory.dmpFilesize
92KB
-
memory/2240-10-0x000007FEF8090000-0x000007FEF80A1000-memory.dmpFilesize
68KB
-
memory/2240-9-0x000007FEFBA00000-0x000007FEFBA17000-memory.dmpFilesize
92KB
-
memory/2240-13-0x000007FEF73D0000-0x000007FEF73ED000-memory.dmpFilesize
116KB
-
memory/2240-12-0x000007FEF7850000-0x000007FEF7861000-memory.dmpFilesize
68KB
-
memory/2240-7-0x000007FEF6750000-0x000007FEF6A06000-memory.dmpFilesize
2.7MB
-
memory/2240-15-0x000007FEF73B0000-0x000007FEF73C1000-memory.dmpFilesize
68KB
-
memory/2240-14-0x000007FEF6540000-0x000007FEF674B000-memory.dmpFilesize
2.0MB
-
memory/2240-16-0x000007FEF7360000-0x000007FEF73A1000-memory.dmpFilesize
260KB
-
memory/2240-17-0x000007FEF6E60000-0x000007FEF6E81000-memory.dmpFilesize
132KB
-
memory/2240-18-0x000007FEF6E40000-0x000007FEF6E58000-memory.dmpFilesize
96KB
-
memory/2240-19-0x000007FEF6E20000-0x000007FEF6E31000-memory.dmpFilesize
68KB
-
memory/2240-20-0x000007FEF6E00000-0x000007FEF6E11000-memory.dmpFilesize
68KB
-
memory/2240-21-0x000007FEF6DE0000-0x000007FEF6DF1000-memory.dmpFilesize
68KB
-
memory/2240-22-0x000007FEF6DC0000-0x000007FEF6DDB000-memory.dmpFilesize
108KB
-
memory/2240-23-0x000007FEF6DA0000-0x000007FEF6DB1000-memory.dmpFilesize
68KB
-
memory/2240-24-0x000007FEF6D80000-0x000007FEF6D98000-memory.dmpFilesize
96KB
-
memory/2240-25-0x000007FEF6510000-0x000007FEF6540000-memory.dmpFilesize
192KB
-
memory/2240-28-0x000007FEF5370000-0x000007FEF53EC000-memory.dmpFilesize
496KB
-
memory/2240-27-0x000007FEF53F0000-0x000007FEF5457000-memory.dmpFilesize
412KB
-
memory/2240-29-0x000007FEF5350000-0x000007FEF5361000-memory.dmpFilesize
68KB
-
memory/2240-30-0x000007FEF52F0000-0x000007FEF5347000-memory.dmpFilesize
348KB
-
memory/2240-32-0x000007FEF5140000-0x000007FEF52C0000-memory.dmpFilesize
1.5MB
-
memory/2240-33-0x000007FEF5120000-0x000007FEF5137000-memory.dmpFilesize
92KB
-
memory/2240-31-0x000007FEF52C0000-0x000007FEF52E8000-memory.dmpFilesize
160KB
-
memory/2240-26-0x000007FEF5460000-0x000007FEF6510000-memory.dmpFilesize
16.7MB
-
memory/2240-55-0x000007FEF5460000-0x000007FEF6510000-memory.dmpFilesize
16.7MB
-
memory/2240-70-0x000000013F6A0000-0x000000013F798000-memory.dmpFilesize
992KB
-
memory/2240-71-0x000007FEF8270000-0x000007FEF82A4000-memory.dmpFilesize
208KB
-
memory/2240-72-0x000007FEF6750000-0x000007FEF6A06000-memory.dmpFilesize
2.7MB
-
memory/2240-73-0x000007FEF5460000-0x000007FEF6510000-memory.dmpFilesize
16.7MB