Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    28/06/2024, 06:31

General

  • Target

    SOUND131.wav

  • Size

    1KB

  • MD5

    899435422642d583aa2a28e1aa5e7b3b

  • SHA1

    961f182053de9c85825b1a6cb29ec6576d708d75

  • SHA256

    74b86b262c3dbb8e366d859786f434eb603ae20a3c5098187effb03a41c5e6de

  • SHA512

    8cf0d0b3ed80337484a73246ffb54f5320fc79177786c4111a7caa70b0f3d986f949d8ab9d0c4233385ea141f642143842299a4c592c56b8a39420448d7d11d6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\SOUND131.wav"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2548-5-0x000000013F790000-0x000000013F888000-memory.dmp

    Filesize

    992KB

  • memory/2548-6-0x000007FEFACA0000-0x000007FEFACD4000-memory.dmp

    Filesize

    208KB

  • memory/2548-14-0x000007FEF7620000-0x000007FEF7631000-memory.dmp

    Filesize

    68KB

  • memory/2548-13-0x000007FEF7650000-0x000007FEF766D000-memory.dmp

    Filesize

    116KB

  • memory/2548-12-0x000007FEFA700000-0x000007FEFA711000-memory.dmp

    Filesize

    68KB

  • memory/2548-11-0x000007FEFA720000-0x000007FEFA737000-memory.dmp

    Filesize

    92KB

  • memory/2548-10-0x000007FEFAA00000-0x000007FEFAA11000-memory.dmp

    Filesize

    68KB

  • memory/2548-9-0x000007FEFAD10000-0x000007FEFAD27000-memory.dmp

    Filesize

    92KB

  • memory/2548-7-0x000007FEF5FB0000-0x000007FEF6266000-memory.dmp

    Filesize

    2.7MB

  • memory/2548-8-0x000007FEFB260000-0x000007FEFB278000-memory.dmp

    Filesize

    96KB

  • memory/2548-16-0x000007FEF4AE0000-0x000007FEF4CEB000-memory.dmp

    Filesize

    2.0MB

  • memory/2548-40-0x000007FEF45E0000-0x000007FEF45F2000-memory.dmp

    Filesize

    72KB

  • memory/2548-42-0x000007FEF4440000-0x000007FEF4453000-memory.dmp

    Filesize

    76KB

  • memory/2548-39-0x000007FEF4620000-0x000007FEF4631000-memory.dmp

    Filesize

    68KB

  • memory/2548-47-0x000007FEF43A0000-0x000007FEF43B6000-memory.dmp

    Filesize

    88KB

  • memory/2548-46-0x000007FEF43C0000-0x000007FEF43D1000-memory.dmp

    Filesize

    68KB

  • memory/2548-44-0x000007FEF4400000-0x000007FEF4411000-memory.dmp

    Filesize

    68KB

  • memory/2548-43-0x000007FEF4420000-0x000007FEF4434000-memory.dmp

    Filesize

    80KB

  • memory/2548-41-0x000007FEF4460000-0x000007FEF45DA000-memory.dmp

    Filesize

    1.5MB

  • memory/2548-15-0x000007FEF4CF0000-0x000007FEF5DA0000-memory.dmp

    Filesize

    16.7MB

  • memory/2548-45-0x000007FEF43E0000-0x000007FEF43F1000-memory.dmp

    Filesize

    68KB

  • memory/2548-38-0x000007FEF46A0000-0x000007FEF46CF000-memory.dmp

    Filesize

    188KB

  • memory/2548-37-0x000007FEFADE0000-0x000007FEFADF0000-memory.dmp

    Filesize

    64KB

  • memory/2548-36-0x000007FEF48C0000-0x000007FEF48D2000-memory.dmp

    Filesize

    72KB

  • memory/2548-35-0x000007FEF48E0000-0x000007FEF48F1000-memory.dmp

    Filesize

    68KB

  • memory/2548-34-0x000007FEF4900000-0x000007FEF4923000-memory.dmp

    Filesize

    140KB

  • memory/2548-33-0x000007FEF5EE0000-0x000007FEF5EF8000-memory.dmp

    Filesize

    96KB

  • memory/2548-32-0x000007FEF4930000-0x000007FEF4954000-memory.dmp

    Filesize

    144KB

  • memory/2548-31-0x000007FEF4960000-0x000007FEF4988000-memory.dmp

    Filesize

    160KB

  • memory/2548-30-0x000007FEF4990000-0x000007FEF49E7000-memory.dmp

    Filesize

    348KB

  • memory/2548-29-0x000007FEF5F70000-0x000007FEF5F81000-memory.dmp

    Filesize

    68KB

  • memory/2548-28-0x000007FEF49F0000-0x000007FEF4A6C000-memory.dmp

    Filesize

    496KB

  • memory/2548-27-0x000007FEF4A70000-0x000007FEF4AD7000-memory.dmp

    Filesize

    412KB

  • memory/2548-26-0x000007FEF5F00000-0x000007FEF5F30000-memory.dmp

    Filesize

    192KB

  • memory/2548-25-0x000007FEF5F90000-0x000007FEF5FA8000-memory.dmp

    Filesize

    96KB

  • memory/2548-24-0x000007FEF67B0000-0x000007FEF67C1000-memory.dmp

    Filesize

    68KB

  • memory/2548-23-0x000007FEF67D0000-0x000007FEF67EB000-memory.dmp

    Filesize

    108KB

  • memory/2548-22-0x000007FEF67F0000-0x000007FEF6801000-memory.dmp

    Filesize

    68KB

  • memory/2548-21-0x000007FEF6810000-0x000007FEF6821000-memory.dmp

    Filesize

    68KB

  • memory/2548-20-0x000007FEF73D0000-0x000007FEF73E1000-memory.dmp

    Filesize

    68KB

  • memory/2548-19-0x000007FEF73F0000-0x000007FEF7408000-memory.dmp

    Filesize

    96KB

  • memory/2548-18-0x000007FEF7410000-0x000007FEF7431000-memory.dmp

    Filesize

    132KB

  • memory/2548-17-0x000007FEF75D0000-0x000007FEF7611000-memory.dmp

    Filesize

    260KB