Analysis

  • max time kernel
    141s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    23-07-2024 10:17

General

  • Target

    Wave/CrackedWave/bin/Background.mp4

  • Size

    4.6MB

  • MD5

    9782180eb68f73030fe24ef6a1735932

  • SHA1

    589827fe098ba048c9f871a28db8eae3e3537ff4

  • SHA256

    3a1cbb800f8f25c2ab703ba8bfdb01e938e4143c3bc0fea8ca734fb5ba779ba7

  • SHA512

    dc768638bae2d6d47d8910252ae64a656d8a6fd88efdf24165ddce51b7afdb4acb3fddd41dfe788737a2cab4fab66174db2f0d2f48bc8669af76d1656bca8be1

  • SSDEEP

    98304:xs/6Ldccul3Wn48btjNEkPSFTaIwJ0Mt6KNY:xs/Gul3EvEmFItMkb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 27 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Wave\CrackedWave\bin\Background.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2672-5-0x000000013F0F0000-0x000000013F1E8000-memory.dmp

    Filesize

    992KB

  • memory/2672-6-0x000007FEF7F90000-0x000007FEF7FC4000-memory.dmp

    Filesize

    208KB

  • memory/2672-14-0x000007FEF6C80000-0x000007FEF6C91000-memory.dmp

    Filesize

    68KB

  • memory/2672-13-0x000007FEF6CA0000-0x000007FEF6CBD000-memory.dmp

    Filesize

    116KB

  • memory/2672-12-0x000007FEF7150000-0x000007FEF7161000-memory.dmp

    Filesize

    68KB

  • memory/2672-10-0x000007FEF7190000-0x000007FEF71A1000-memory.dmp

    Filesize

    68KB

  • memory/2672-11-0x000007FEF7170000-0x000007FEF7187000-memory.dmp

    Filesize

    92KB

  • memory/2672-7-0x000007FEF7CD0000-0x000007FEF7F86000-memory.dmp

    Filesize

    2.7MB

  • memory/2672-9-0x000007FEF71B0000-0x000007FEF71C7000-memory.dmp

    Filesize

    92KB

  • memory/2672-8-0x000007FEFC0B0000-0x000007FEFC0C8000-memory.dmp

    Filesize

    96KB

  • memory/2672-15-0x000007FEF67B0000-0x000007FEF69BB000-memory.dmp

    Filesize

    2.0MB

  • memory/2672-17-0x000007FEF56B0000-0x000007FEF56F1000-memory.dmp

    Filesize

    260KB

  • memory/2672-18-0x000007FEF6C50000-0x000007FEF6C71000-memory.dmp

    Filesize

    132KB

  • memory/2672-19-0x000007FEF5690000-0x000007FEF56A8000-memory.dmp

    Filesize

    96KB

  • memory/2672-20-0x000007FEF5670000-0x000007FEF5681000-memory.dmp

    Filesize

    68KB

  • memory/2672-21-0x000007FEF5650000-0x000007FEF5661000-memory.dmp

    Filesize

    68KB

  • memory/2672-22-0x000007FEF5630000-0x000007FEF5641000-memory.dmp

    Filesize

    68KB

  • memory/2672-30-0x000007FEF5430000-0x000007FEF5487000-memory.dmp

    Filesize

    348KB

  • memory/2672-32-0x000007FEF5290000-0x000007FEF52A7000-memory.dmp

    Filesize

    92KB

  • memory/2672-16-0x000007FEF5700000-0x000007FEF67B0000-memory.dmp

    Filesize

    16.7MB

  • memory/2672-29-0x000007FEF5490000-0x000007FEF54A1000-memory.dmp

    Filesize

    68KB

  • memory/2672-31-0x000007FEF52B0000-0x000007FEF5430000-memory.dmp

    Filesize

    1.5MB

  • memory/2672-28-0x000007FEF54B0000-0x000007FEF552C000-memory.dmp

    Filesize

    496KB

  • memory/2672-27-0x000007FEF5530000-0x000007FEF5597000-memory.dmp

    Filesize

    412KB

  • memory/2672-26-0x000007FEF55A0000-0x000007FEF55D0000-memory.dmp

    Filesize

    192KB

  • memory/2672-25-0x000007FEF55D0000-0x000007FEF55E8000-memory.dmp

    Filesize

    96KB

  • memory/2672-24-0x000007FEF55F0000-0x000007FEF5601000-memory.dmp

    Filesize

    68KB

  • memory/2672-23-0x000007FEF5610000-0x000007FEF562B000-memory.dmp

    Filesize

    108KB

  • memory/2672-42-0x000007FEF31C0000-0x000007FEF3285000-memory.dmp

    Filesize

    788KB

  • memory/2672-36-0x000007FEF37A0000-0x000007FEF37E2000-memory.dmp

    Filesize

    264KB

  • memory/2672-35-0x000007FEF37F0000-0x000007FEF3802000-memory.dmp

    Filesize

    72KB

  • memory/2672-34-0x000007FEF3810000-0x000007FEF3A16000-memory.dmp

    Filesize

    2.0MB

  • memory/2672-53-0x000007FEF2740000-0x000007FEF27A1000-memory.dmp

    Filesize

    388KB

  • memory/2672-38-0x000007FEF7790000-0x000007FEF77A0000-memory.dmp

    Filesize

    64KB

  • memory/2672-37-0x000007FEF3750000-0x000007FEF379D000-memory.dmp

    Filesize

    308KB

  • memory/2672-39-0x000007FEF3300000-0x000007FEF332F000-memory.dmp

    Filesize

    188KB

  • memory/2672-59-0x000007FEF2170000-0x000007FEF21A4000-memory.dmp

    Filesize

    208KB

  • memory/2672-58-0x000007FEF21B0000-0x000007FEF2207000-memory.dmp

    Filesize

    348KB

  • memory/2672-57-0x000007FEF2210000-0x000007FEF225E000-memory.dmp

    Filesize

    312KB

  • memory/2672-56-0x000007FEF2500000-0x000007FEF2511000-memory.dmp

    Filesize

    68KB

  • memory/2672-55-0x000007FEF2670000-0x000007FEF26E4000-memory.dmp

    Filesize

    464KB

  • memory/2672-54-0x000007FEF26F0000-0x000007FEF2737000-memory.dmp

    Filesize

    284KB

  • memory/2672-50-0x000007FEF29F0000-0x000007FEF2B6A000-memory.dmp

    Filesize

    1.5MB

  • memory/2672-52-0x000007FEF27B0000-0x000007FEF27C1000-memory.dmp

    Filesize

    68KB

  • memory/2672-51-0x000007FEF2C80000-0x000007FEF2C93000-memory.dmp

    Filesize

    76KB

  • memory/2672-49-0x000007FEF2CA0000-0x000007FEF2CC3000-memory.dmp

    Filesize

    140KB

  • memory/2672-48-0x000007FEF2CD0000-0x000007FEF2CE5000-memory.dmp

    Filesize

    84KB

  • memory/2672-47-0x000007FEF2CF0000-0x000007FEF2D02000-memory.dmp

    Filesize

    72KB

  • memory/2672-46-0x000007FEF2D10000-0x000007FEF2D21000-memory.dmp

    Filesize

    68KB

  • memory/2672-45-0x000007FEF3090000-0x000007FEF30FD000-memory.dmp

    Filesize

    436KB

  • memory/2672-44-0x000007FEF3100000-0x000007FEF3162000-memory.dmp

    Filesize

    392KB

  • memory/2672-43-0x000007FEF3170000-0x000007FEF31B2000-memory.dmp

    Filesize

    264KB

  • memory/2672-33-0x000007FEF3A20000-0x000007FEF528F000-memory.dmp

    Filesize

    24.4MB

  • memory/2672-41-0x000007FEF3290000-0x000007FEF32A6000-memory.dmp

    Filesize

    88KB

  • memory/2672-40-0x000007FEF32E0000-0x000007FEF32F1000-memory.dmp

    Filesize

    68KB

  • memory/2672-62-0x000007FEF7CD0000-0x000007FEF7F86000-memory.dmp

    Filesize

    2.7MB