Analysis
-
max time kernel
300s -
max time network
191s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
25/06/2024, 01:35
General
-
Target
Data/Soundtrack/14. GGZ2.ogg
-
Size
4.4MB
-
MD5
83d9183db7a4d97ad77e2ba0ad05f75d
-
SHA1
8102879747cbc5fdeb333ccdf873b097aabc8bc3
-
SHA256
cf39fe929879e68d97932811a8feccf5241c1cdc34bd57b3bfe666489a3c9922
-
SHA512
30816d7b89d9f8a4304c0cda825f86b386ca6812e5496c5130039b982369dd93223ee5f08436b104d656fa8b0b3dc8b45e2795cc77961ea0a998c52a10a8d76b
-
SSDEEP
98304:zTTJnpRtwin1WTjPvik5u5wcCzX3MWS0A86EOxm:zTdnVwbRcCzXn/A86Hm
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
-
Suspicious use of FindShellTrayWindow 8 IoCs
-
Suspicious use of SendNotifyMessage 7 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Data\Soundtrack\14. GGZ2.ogg"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x3201⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
208KB
-
Filesize
992KB
-
Filesize
68KB
-
Filesize
116KB
-
Filesize
2.7MB
-
Filesize
2.0MB
-
Filesize
260KB
-
Filesize
68KB
-
Filesize
92KB
-
Filesize
68KB
-
Filesize
92KB
-
Filesize
96KB
-
Filesize
108KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
96KB
-
Filesize
132KB
-
Filesize
16.7MB