Analysis

  • max time kernel
    51s
  • max time network
    18s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    26/06/2024, 16:39

General

  • Target

    python-MidiToVirtualPianoMacro-master/bach.mid

  • Size

    12KB

  • MD5

    f7ab9716a5e6f1ee971d0e788c58c5cb

  • SHA1

    7759b99a471715ba00d5d68f72c7b83d47a25d29

  • SHA256

    107f2b6a298f283f8d26d4e8359669e7780f7ea64011b7844f2ed066d874a37e

  • SHA512

    90a7045902692069baa70867e7bd2e7776ea924a71e8e8288362f469fbc2cb1ad4a6e34cef0e6c92ae6c98cd174a661a79fd6e6d46f52b0a8626af261d2dc74a

  • SSDEEP

    384:eyeRbc2H1ACD1tVawMF8oIgf9fEq2GSquooweqo:5Abc2b1tYw5o3fdEMgx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\python-MidiToVirtualPianoMacro-master\bach.mid"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1452-6-0x00007FFDA1920000-0x00007FFDA1954000-memory.dmp

    Filesize

    208KB

  • memory/1452-11-0x00007FFDA1890000-0x00007FFDA18A7000-memory.dmp

    Filesize

    92KB

  • memory/1452-14-0x00007FFD9EF50000-0x00007FFD9EF61000-memory.dmp

    Filesize

    68KB

  • memory/1452-13-0x00007FFD9F020000-0x00007FFD9F03D000-memory.dmp

    Filesize

    116KB

  • memory/1452-12-0x00007FFDA17B0000-0x00007FFDA17C1000-memory.dmp

    Filesize

    68KB

  • memory/1452-7-0x00007FFD9DB00000-0x00007FFD9DDB6000-memory.dmp

    Filesize

    2.7MB

  • memory/1452-15-0x00007FFD9D130000-0x00007FFD9D33B000-memory.dmp

    Filesize

    2.0MB

  • memory/1452-16-0x00007FFD9EBF0000-0x00007FFD9EC31000-memory.dmp

    Filesize

    260KB

  • memory/1452-10-0x00007FFDA18B0000-0x00007FFDA18C1000-memory.dmp

    Filesize

    68KB

  • memory/1452-9-0x00007FFDA18D0000-0x00007FFDA18E7000-memory.dmp

    Filesize

    92KB

  • memory/1452-8-0x00007FFDA3850000-0x00007FFDA3868000-memory.dmp

    Filesize

    96KB

  • memory/1452-5-0x00007FF725AF0000-0x00007FF725BE8000-memory.dmp

    Filesize

    992KB

  • memory/1452-23-0x00007FFD9EAC0000-0x00007FFD9EADB000-memory.dmp

    Filesize

    108KB

  • memory/1452-22-0x00007FFD9EAE0000-0x00007FFD9EAF1000-memory.dmp

    Filesize

    68KB

  • memory/1452-21-0x00007FFD9EB00000-0x00007FFD9EB11000-memory.dmp

    Filesize

    68KB

  • memory/1452-20-0x00007FFD9EBB0000-0x00007FFD9EBC1000-memory.dmp

    Filesize

    68KB

  • memory/1452-19-0x00007FFD9EBD0000-0x00007FFD9EBE8000-memory.dmp

    Filesize

    96KB

  • memory/1452-18-0x00007FFD9EF20000-0x00007FFD9EF41000-memory.dmp

    Filesize

    132KB

  • memory/1452-17-0x00007FFD8CF20000-0x00007FFD8DFD0000-memory.dmp

    Filesize

    16.7MB

  • memory/1452-55-0x00007FFD8CF20000-0x00007FFD8DFD0000-memory.dmp

    Filesize

    16.7MB