72d72607279e1add253c86dc2e664027dd1f495fbef456cb7415ef36dcf3901a

Analysis

max time kernel
141s
max time network
126s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
07/07/2024, 11:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

NightyGo/data/nitrosound.mp3
Size

8KB
MD5

812c7504df40d796245774dce0e6c85c
SHA1

6c1c3bb3ce138b29a2681af9e6b6dbaab80e1e47
SHA256

3b8d47c95911247ffcdbb44fe1111852d447cfef21ed9dd52e72577671e531f3
SHA512

e8cb13c6e81c9df4052af65357574ddf8f71f6c4400b3eea95f617471375be2f91ac1706da6edf12fcce9d7ea09deda83747fef56b4ed93b6ff95920c3fa5ddc
SSDEEP

192:QCsw5oFc5mypvMcYkYP9Y6fFqztAeQSXrPs7ZApBh3:5srFSpvMDr9TwtAeQWPs783

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
1540	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1540	vlc.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	1540	vlc.exe
Token: SeIncBasePriorityPrivilege	1540	vlc.exe

Suspicious use of FindShellTrayWindow 9 IoCs

pid	Process
1540	vlc.exe
1540	vlc.exe
1540	vlc.exe
1540	vlc.exe
1540	vlc.exe
1540	vlc.exe
1540	vlc.exe
1540	vlc.exe
1540	vlc.exe

Suspicious use of SendNotifyMessage 8 IoCs

pid	Process
1540	vlc.exe
1540	vlc.exe
1540	vlc.exe
1540	vlc.exe
1540	vlc.exe
1540	vlc.exe
1540	vlc.exe
1540	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1540	vlc.exe

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\NightyGo\data\nitrosound.mp3"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1540-5-0x000000013F790000-0x000000013F888000-memory.dmp

Filesize
992KB

Download
memory/1540-6-0x000007FEF78F0000-0x000007FEF7924000-memory.dmp

Filesize
208KB

Download
memory/1540-8-0x000007FEFB960000-0x000007FEFB978000-memory.dmp

Filesize
96KB

Download
memory/1540-10-0x000007FEF7740000-0x000007FEF7751000-memory.dmp

Filesize
68KB

Download
memory/1540-13-0x000007FEF76E0000-0x000007FEF76FD000-memory.dmp

Filesize
116KB

Download
memory/1540-12-0x000007FEF7700000-0x000007FEF7711000-memory.dmp

Filesize
68KB

Download
memory/1540-11-0x000007FEF7720000-0x000007FEF7737000-memory.dmp

Filesize
92KB

Download
memory/1540-9-0x000007FEF7760000-0x000007FEF7777000-memory.dmp

Filesize
92KB

Download
memory/1540-7-0x000007FEF5CB0000-0x000007FEF5F66000-memory.dmp

Filesize
2.7MB

Download
memory/1540-14-0x000007FEF76C0000-0x000007FEF76D1000-memory.dmp

Filesize
68KB

Download
memory/1540-16-0x000007FEF49F0000-0x000007FEF4BFB000-memory.dmp

Filesize
2.0MB

Download
memory/1540-18-0x000007FEF7690000-0x000007FEF76B1000-memory.dmp

Filesize
132KB

Download
memory/1540-19-0x000007FEF7110000-0x000007FEF7128000-memory.dmp

Filesize
96KB

Download
memory/1540-17-0x000007FEF6C60000-0x000007FEF6CA1000-memory.dmp

Filesize
260KB

Download
memory/1540-20-0x000007FEF6C40000-0x000007FEF6C51000-memory.dmp

Filesize
68KB

Download
memory/1540-21-0x000007FEF6C20000-0x000007FEF6C31000-memory.dmp

Filesize
68KB

Download
memory/1540-15-0x000007FEF4C00000-0x000007FEF5CB0000-memory.dmp

Filesize
16.7MB

Download
memory/1540-22-0x000007FEF6C00000-0x000007FEF6C11000-memory.dmp

Filesize
68KB

Download
memory/1540-23-0x000007FEF6BE0000-0x000007FEF6BFB000-memory.dmp

Filesize
108KB

Download
memory/1540-24-0x000007FEF6BC0000-0x000007FEF6BD1000-memory.dmp

Filesize
68KB

Download
memory/1540-25-0x000007FEF6BA0000-0x000007FEF6BB8000-memory.dmp

Filesize
96KB

Download
memory/1540-26-0x000007FEF6B70000-0x000007FEF6BA0000-memory.dmp

Filesize
192KB

Download
memory/1540-27-0x000007FEF6B00000-0x000007FEF6B67000-memory.dmp

Filesize
412KB

Download
memory/1540-28-0x000007FEF6610000-0x000007FEF668C000-memory.dmp

Filesize
496KB

Download
memory/1540-29-0x000007FEF65F0000-0x000007FEF6601000-memory.dmp

Filesize
68KB

Download
memory/1540-31-0x000007FEF63A0000-0x000007FEF63B1000-memory.dmp

Filesize
68KB

Download
memory/1540-30-0x000007FEF63C0000-0x000007FEF63D8000-memory.dmp

Filesize
96KB

Download
memory/1540-32-0x000007FEF6340000-0x000007FEF6397000-memory.dmp

Filesize
348KB

Download
memory/1540-33-0x000007FEF6310000-0x000007FEF633F000-memory.dmp

Filesize
188KB

Download
memory/1540-34-0x000007FEF62F0000-0x000007FEF6303000-memory.dmp

Filesize
76KB

Download
memory/1540-35-0x000007FEF49D0000-0x000007FEF49E1000-memory.dmp

Filesize
68KB

Download
memory/1540-36-0x000007FEF4900000-0x000007FEF49C5000-memory.dmp

Filesize
788KB

Download
memory/1540-38-0x000007FEF2C30000-0x000007FEF2C58000-memory.dmp

Filesize
160KB

Download
memory/1540-37-0x000007FEF2CA0000-0x000007FEF2CF7000-memory.dmp

Filesize
348KB

Download
memory/1540-39-0x000007FEF7680000-0x000007FEF7690000-memory.dmp

Filesize
64KB

Download
memory/1540-40-0x000007FEF2C80000-0x000007FEF2C96000-memory.dmp

Filesize
88KB

Download
memory/1540-41-0x000007FEF2BB0000-0x000007FEF2BF2000-memory.dmp

Filesize
264KB

Download
memory/1540-42-0x000007FEF2AB0000-0x000007FEF2AC5000-memory.dmp

Filesize
84KB

Download
memory/1540-43-0x000007FEF2A70000-0x000007FEF2A81000-memory.dmp

Filesize
68KB

Download
memory/1540-44-0x000007FEF2A50000-0x000007FEF2A62000-memory.dmp

Filesize
72KB

Download
memory/1540-45-0x000007FEF28D0000-0x000007FEF2A4A000-memory.dmp

Filesize
1.5MB

Download