Resubmissions

25/06/2024, 01:37

240625-b151baxamn 8

25/06/2024, 01:35

240625-bzvsystckh 7

Analysis

  • max time kernel
    291s
  • max time network
    259s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    25/06/2024, 01:35

General

  • Target

    Data/Soundtrack/26. Boss3.ogg

  • Size

    1.2MB

  • MD5

    920b26c14c1907fcf26c8af3e998c4cf

  • SHA1

    f8acc3f24994158994ec212111806d2f954de582

  • SHA256

    0a59eda5f9195b9faf71cefe4f08c4974c8ba762ed329311c21e8014a53ea3ed

  • SHA512

    8d87d4ad2e8cf8c8d6f3a8485799dda1385638e232e872355397f082b7df5b2b8bb2459bceb234c3c2d9a375dc7a6120a74ef8a4dc854176e848061116da5115

  • SSDEEP

    24576:7WWdKljTymNJ/82HtznVqEK+/THKUQurpEpo4sdxRp6:7C/y4/8aj4K/WLur+p60

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Data\Soundtrack\26. Boss3.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:596
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x3c4
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/596-7-0x00007FF74F450000-0x00007FF74F548000-memory.dmp

    Filesize

    992KB

  • memory/596-8-0x00007FFA76A80000-0x00007FFA76AB4000-memory.dmp

    Filesize

    208KB

  • memory/596-9-0x00007FFA75DB0000-0x00007FFA76066000-memory.dmp

    Filesize

    2.7MB

  • memory/596-16-0x00007FFA769E0000-0x00007FFA769F1000-memory.dmp

    Filesize

    68KB

  • memory/596-15-0x00007FFA76A00000-0x00007FFA76A1D000-memory.dmp

    Filesize

    116KB

  • memory/596-17-0x00007FFA67DC0000-0x00007FFA67FCB000-memory.dmp

    Filesize

    2.0MB

  • memory/596-14-0x00007FFA76A20000-0x00007FFA76A31000-memory.dmp

    Filesize

    68KB

  • memory/596-13-0x00007FFA76A40000-0x00007FFA76A57000-memory.dmp

    Filesize

    92KB

  • memory/596-12-0x00007FFA76A60000-0x00007FFA76A71000-memory.dmp

    Filesize

    68KB

  • memory/596-11-0x00007FFA76C20000-0x00007FFA76C37000-memory.dmp

    Filesize

    92KB

  • memory/596-10-0x00007FFA7C180000-0x00007FFA7C198000-memory.dmp

    Filesize

    96KB

  • memory/596-21-0x00007FFA768D0000-0x00007FFA768E8000-memory.dmp

    Filesize

    96KB

  • memory/596-25-0x00007FFA76520000-0x00007FFA7653B000-memory.dmp

    Filesize

    108KB

  • memory/596-24-0x00007FFA76540000-0x00007FFA76551000-memory.dmp

    Filesize

    68KB

  • memory/596-23-0x00007FFA76560000-0x00007FFA76571000-memory.dmp

    Filesize

    68KB

  • memory/596-22-0x00007FFA768B0000-0x00007FFA768C1000-memory.dmp

    Filesize

    68KB

  • memory/596-18-0x00007FFA66D10000-0x00007FFA67DC0000-memory.dmp

    Filesize

    16.7MB

  • memory/596-20-0x00007FFA769B0000-0x00007FFA769D1000-memory.dmp

    Filesize

    132KB

  • memory/596-19-0x00007FFA768F0000-0x00007FFA76931000-memory.dmp

    Filesize

    260KB

  • memory/596-37-0x00007FFA66D10000-0x00007FFA67DC0000-memory.dmp

    Filesize

    16.7MB