Overview
overview
3Static
static
3MIRP1.6.8.3.zip
windows10-1703-x64
1MIRP1.6.8.3.zip
windows10-2004-x64
1A Turn Bac...o).mid
windows10-1703-x64
1A Turn Bac...o).mid
windows10-2004-x64
1LICENSE
windows10-1703-x64
1LICENSE
windows10-2004-x64
1MIRP.exe
windows10-1703-x64
1MIRP.exe
windows10-2004-x64
1default.mlf
windows10-1703-x64
3default.mlf
windows10-2004-x64
3Analysis
-
max time kernel
593s -
max time network
448s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-fr -
resource tags
arch:x64arch:x86image:win10v2004-20240704-frlocale:fr-fros:windows10-2004-x64systemwindows -
submitted
06-07-2024 00:42
Static task
static1
Behavioral task
behavioral1
Sample
MIRP1.6.8.3.zip
Resource
win10-20240404-fr
Behavioral task
behavioral2
Sample
MIRP1.6.8.3.zip
Resource
win10v2004-20240508-fr
Behavioral task
behavioral3
Sample
A Turn Back (Piano).mid
Resource
win10-20240404-fr
Behavioral task
behavioral4
Sample
A Turn Back (Piano).mid
Resource
win10v2004-20240704-fr
Behavioral task
behavioral5
Sample
LICENSE
Resource
win10-20240404-fr
Behavioral task
behavioral6
Sample
LICENSE
Resource
win10v2004-20240704-fr
Behavioral task
behavioral7
Sample
MIRP.exe
Resource
win10-20240611-fr
Behavioral task
behavioral8
Sample
MIRP.exe
Resource
win10v2004-20240704-fr
Behavioral task
behavioral9
Sample
default.mlf
Resource
win10-20240404-fr
Behavioral task
behavioral10
Sample
default.mlf
Resource
win10v2004-20240704-fr
General
-
Target
A Turn Back (Piano).mid
-
Size
13KB
-
MD5
ff6fa4dceb059f14560280856390b5e8
-
SHA1
ec3e123dffeb1814084e90a84f9cc698d30070ba
-
SHA256
0480e68863c334cead15a00a9461485db0838717cff26ae0960077c7db557c9a
-
SHA512
69d42f77ea81419875c26cf49b49e8258629d6b3f9ba01940f2085f52009fe1f59ba4eef9d00443624a51b82b3ab390986c43b9bf2a0087ffaa7b90fe0a8050e
-
SSDEEP
192:2STtoEf6U5Q4jDfH079fL/4Li+xSJFyZuZnrnHasdB0wYz6Cj7GNClCiP:FTtff6bsot/4m+xLZOn5PVCj7GNwH
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 488 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 488 vlc.exe -
Suspicious use of FindShellTrayWindow 10 IoCs
pid Process 488 vlc.exe 488 vlc.exe 488 vlc.exe 488 vlc.exe 488 vlc.exe 488 vlc.exe 488 vlc.exe 488 vlc.exe 488 vlc.exe 488 vlc.exe -
Suspicious use of SendNotifyMessage 9 IoCs
pid Process 488 vlc.exe 488 vlc.exe 488 vlc.exe 488 vlc.exe 488 vlc.exe 488 vlc.exe 488 vlc.exe 488 vlc.exe 488 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 488 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\A Turn Back (Piano).mid"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:488