Resubmissions

25-06-2024 01:37

240625-b151baxamn 8

25-06-2024 01:35

240625-bzvsystckh 7

Analysis

  • max time kernel
    291s
  • max time network
    259s
  • platform
    windows10-1703_x64
  • resource
    win10-20240611-en
  • resource tags

    arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system
  • submitted
    25-06-2024 01:35

General

  • Target

    Data/Soundtrack/27. GGZ4.ogg

  • Size

    2.0MB

  • MD5

    0308b1c1242ed5f9d55aae32e7eadc7f

  • SHA1

    40efa69f64a7efd0057e6b61c882f8906d1f7c4a

  • SHA256

    8e089517ba8459f56f8e9e9326bcf2295e62b7f8179efad648b69cb3569083c2

  • SHA512

    4aa5a2c11d455763b2bac9971f59610cfed72a87c9e79121cdb60ff56c293f6cb5000d7b5b8ef45338caf10d57cd3a932eb2bb10ccee2f08ffd60c055a6b9b17

  • SSDEEP

    49152:80IwJz6ZHGU6u7rktd6zYU0shdnRquCa9PO:801kVFo6zNhdRya8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Data\Soundtrack\27. GGZ4.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:4512
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x200
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4512-8-0x00007FF979AD0000-0x00007FF979B04000-memory.dmp

    Filesize

    208KB

  • memory/4512-7-0x00007FF68FD90000-0x00007FF68FE88000-memory.dmp

    Filesize

    992KB

  • memory/4512-16-0x00007FF9799C0000-0x00007FF9799D1000-memory.dmp

    Filesize

    68KB

  • memory/4512-15-0x00007FF979A50000-0x00007FF979A6D000-memory.dmp

    Filesize

    116KB

  • memory/4512-9-0x00007FF9754A0000-0x00007FF975756000-memory.dmp

    Filesize

    2.7MB

  • memory/4512-14-0x00007FF979A70000-0x00007FF979A81000-memory.dmp

    Filesize

    68KB

  • memory/4512-13-0x00007FF979A90000-0x00007FF979AA7000-memory.dmp

    Filesize

    92KB

  • memory/4512-12-0x00007FF979AB0000-0x00007FF979AC1000-memory.dmp

    Filesize

    68KB

  • memory/4512-11-0x00007FF97A140000-0x00007FF97A157000-memory.dmp

    Filesize

    92KB

  • memory/4512-10-0x00007FF97BC30000-0x00007FF97BC48000-memory.dmp

    Filesize

    96KB

  • memory/4512-17-0x00007FF967340000-0x00007FF96754B000-memory.dmp

    Filesize

    2.0MB

  • memory/4512-25-0x00007FF9769F0000-0x00007FF976A0B000-memory.dmp

    Filesize

    108KB

  • memory/4512-24-0x00007FF976A10000-0x00007FF976A21000-memory.dmp

    Filesize

    68KB

  • memory/4512-23-0x00007FF976B60000-0x00007FF976B71000-memory.dmp

    Filesize

    68KB

  • memory/4512-22-0x00007FF976B80000-0x00007FF976B91000-memory.dmp

    Filesize

    68KB

  • memory/4512-21-0x00007FF976BA0000-0x00007FF976BB8000-memory.dmp

    Filesize

    96KB

  • memory/4512-20-0x00007FF976BC0000-0x00007FF976BE1000-memory.dmp

    Filesize

    132KB

  • memory/4512-19-0x00007FF976BF0000-0x00007FF976C31000-memory.dmp

    Filesize

    260KB

  • memory/4512-18-0x00007FF966290000-0x00007FF967340000-memory.dmp

    Filesize

    16.7MB

  • memory/4512-37-0x00007FF966290000-0x00007FF967340000-memory.dmp

    Filesize

    16.7MB