Resubmissions

25-06-2024 01:37

240625-b151baxamn 8

25-06-2024 01:35

240625-bzvsystckh 7

Analysis

  • max time kernel
    300s
  • max time network
    307s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    25-06-2024 01:35

General

  • Target

    Data/Soundtrack/24. VVZ2.ogg

  • Size

    1.5MB

  • MD5

    e111b49f8a0196b565f80eb5bd6a9116

  • SHA1

    0eb5bdab597f3e2592f86b0e5c764d96f653e907

  • SHA256

    64ba615c96e4d0ba641668b371c49f25932305ac41cec55f7d3df35fe6190260

  • SHA512

    2f0bf21204f05aea32a775123f24249e567d676cad136eebf036a3fc8ed39edec49756311f22ed2d7f0d48f935f74124423ba8e11f72c51dd69934411a9a1c84

  • SSDEEP

    24576:KEoGo2iJj436O1I7xTM6Hp5+2cVkdy2axFPw4p+pKV7vEluBsgTFhm0cMFM9c:KW3i5I+7xTMmERVkdy2uqNKV7vEIsgpR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Data\Soundtrack\24. VVZ2.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:3764
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x3c8
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3764-8-0x00007FFE16B90000-0x00007FFE16BC4000-memory.dmp

    Filesize

    208KB

  • memory/3764-7-0x00007FF6D9E70000-0x00007FF6D9F68000-memory.dmp

    Filesize

    992KB

  • memory/3764-16-0x00007FFE16490000-0x00007FFE164A1000-memory.dmp

    Filesize

    68KB

  • memory/3764-9-0x00007FFE15AA0000-0x00007FFE15D56000-memory.dmp

    Filesize

    2.7MB

  • memory/3764-15-0x00007FFE164B0000-0x00007FFE164CD000-memory.dmp

    Filesize

    116KB

  • memory/3764-18-0x00007FFE16440000-0x00007FFE16481000-memory.dmp

    Filesize

    260KB

  • memory/3764-17-0x00007FFE07700000-0x00007FFE0790B000-memory.dmp

    Filesize

    2.0MB

  • memory/3764-14-0x00007FFE164D0000-0x00007FFE164E1000-memory.dmp

    Filesize

    68KB

  • memory/3764-13-0x00007FFE16570000-0x00007FFE16587000-memory.dmp

    Filesize

    92KB

  • memory/3764-12-0x00007FFE16B20000-0x00007FFE16B31000-memory.dmp

    Filesize

    68KB

  • memory/3764-11-0x00007FFE16B40000-0x00007FFE16B57000-memory.dmp

    Filesize

    92KB

  • memory/3764-10-0x00007FFE1A210000-0x00007FFE1A228000-memory.dmp

    Filesize

    96KB

  • memory/3764-25-0x00007FFE16370000-0x00007FFE1638B000-memory.dmp

    Filesize

    108KB

  • memory/3764-24-0x00007FFE16390000-0x00007FFE163A1000-memory.dmp

    Filesize

    68KB

  • memory/3764-23-0x00007FFE163B0000-0x00007FFE163C1000-memory.dmp

    Filesize

    68KB

  • memory/3764-22-0x00007FFE163D0000-0x00007FFE163E1000-memory.dmp

    Filesize

    68KB

  • memory/3764-21-0x00007FFE163F0000-0x00007FFE16408000-memory.dmp

    Filesize

    96KB

  • memory/3764-20-0x00007FFE16410000-0x00007FFE16431000-memory.dmp

    Filesize

    132KB

  • memory/3764-19-0x00007FFE06650000-0x00007FFE07700000-memory.dmp

    Filesize

    16.7MB

  • memory/3764-57-0x00007FFE06650000-0x00007FFE07700000-memory.dmp

    Filesize

    16.7MB