Analysis

  • max time kernel
    140s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    23-07-2024 17:22

General

  • Target

    Wave/CrackedWave/bin/Background.mp4

  • Size

    4.6MB

  • MD5

    9782180eb68f73030fe24ef6a1735932

  • SHA1

    589827fe098ba048c9f871a28db8eae3e3537ff4

  • SHA256

    3a1cbb800f8f25c2ab703ba8bfdb01e938e4143c3bc0fea8ca734fb5ba779ba7

  • SHA512

    dc768638bae2d6d47d8910252ae64a656d8a6fd88efdf24165ddce51b7afdb4acb3fddd41dfe788737a2cab4fab66174db2f0d2f48bc8669af76d1656bca8be1

  • SSDEEP

    98304:xs/6Ldccul3Wn48btjNEkPSFTaIwJ0Mt6KNY:xs/Gul3EvEmFItMkb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 48 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Wave\CrackedWave\bin\Background.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2416-6-0x000007FEFB500000-0x000007FEFB534000-memory.dmp

    Filesize

    208KB

  • memory/2416-5-0x000000013F280000-0x000000013F378000-memory.dmp

    Filesize

    992KB

  • memory/2416-7-0x000007FEF7BE0000-0x000007FEF7E96000-memory.dmp

    Filesize

    2.7MB

  • memory/2416-8-0x000007FEFBBA0000-0x000007FEFBBB8000-memory.dmp

    Filesize

    96KB

  • memory/2416-9-0x000007FEFB4B0000-0x000007FEFB4C7000-memory.dmp

    Filesize

    92KB

  • memory/2416-11-0x000007FEFB290000-0x000007FEFB2A7000-memory.dmp

    Filesize

    92KB

  • memory/2416-12-0x000007FEFB270000-0x000007FEFB281000-memory.dmp

    Filesize

    68KB

  • memory/2416-14-0x000007FEFB230000-0x000007FEFB241000-memory.dmp

    Filesize

    68KB

  • memory/2416-13-0x000007FEFB250000-0x000007FEFB26D000-memory.dmp

    Filesize

    116KB

  • memory/2416-10-0x000007FEFB490000-0x000007FEFB4A1000-memory.dmp

    Filesize

    68KB

  • memory/2416-30-0x000007FEF57E0000-0x000007FEF5837000-memory.dmp

    Filesize

    348KB

  • memory/2416-29-0x000007FEF71D0000-0x000007FEF71E1000-memory.dmp

    Filesize

    68KB

  • memory/2416-28-0x000007FEF5840000-0x000007FEF58BC000-memory.dmp

    Filesize

    496KB

  • memory/2416-16-0x000007FEF5930000-0x000007FEF5B3B000-memory.dmp

    Filesize

    2.0MB

  • memory/2416-27-0x000007FEF58C0000-0x000007FEF5927000-memory.dmp

    Filesize

    412KB

  • memory/2416-26-0x000007FEF6FE0000-0x000007FEF7010000-memory.dmp

    Filesize

    192KB

  • memory/2416-25-0x000007FEF7BC0000-0x000007FEF7BD8000-memory.dmp

    Filesize

    96KB

  • memory/2416-24-0x000007FEFAEE0000-0x000007FEFAEF1000-memory.dmp

    Filesize

    68KB

  • memory/2416-32-0x000007FEF7160000-0x000007FEF7177000-memory.dmp

    Filesize

    92KB

  • memory/2416-31-0x000007FEF5660000-0x000007FEF57E0000-memory.dmp

    Filesize

    1.5MB

  • memory/2416-23-0x000007FEFAF00000-0x000007FEFAF1B000-memory.dmp

    Filesize

    108KB

  • memory/2416-22-0x000007FEFAF20000-0x000007FEFAF31000-memory.dmp

    Filesize

    68KB

  • memory/2416-21-0x000007FEFAF40000-0x000007FEFAF51000-memory.dmp

    Filesize

    68KB

  • memory/2416-20-0x000007FEFAF60000-0x000007FEFAF71000-memory.dmp

    Filesize

    68KB

  • memory/2416-19-0x000007FEFAF80000-0x000007FEFAF98000-memory.dmp

    Filesize

    96KB

  • memory/2416-18-0x000007FEFB1B0000-0x000007FEFB1D1000-memory.dmp

    Filesize

    132KB

  • memory/2416-17-0x000007FEFB1E0000-0x000007FEFB221000-memory.dmp

    Filesize

    260KB

  • memory/2416-15-0x000007FEF5B40000-0x000007FEF6BF0000-memory.dmp

    Filesize

    16.7MB

  • memory/2416-36-0x000007FEF3B90000-0x000007FEF3BD2000-memory.dmp

    Filesize

    264KB

  • memory/2416-38-0x000007FEF3420000-0x000007FEF3435000-memory.dmp

    Filesize

    84KB

  • memory/2416-37-0x000007FEF3B40000-0x000007FEF3B8D000-memory.dmp

    Filesize

    308KB

  • memory/2416-34-0x000007FEF3BE0000-0x000007FEF3DE6000-memory.dmp

    Filesize

    2.0MB

  • memory/2416-35-0x000007FEF6FC0000-0x000007FEF6FD2000-memory.dmp

    Filesize

    72KB

  • memory/2416-33-0x000007FEF3DF0000-0x000007FEF565F000-memory.dmp

    Filesize

    24.4MB

  • memory/2416-42-0x000007FEF3100000-0x000007FEF3113000-memory.dmp

    Filesize

    76KB

  • memory/2416-41-0x000007FEF3120000-0x000007FEF3143000-memory.dmp

    Filesize

    140KB

  • memory/2416-40-0x000007FEF3150000-0x000007FEF3165000-memory.dmp

    Filesize

    84KB

  • memory/2416-39-0x000007FEF3170000-0x000007FEF3420000-memory.dmp

    Filesize

    2.7MB

  • memory/2416-44-0x000007FEF2FC0000-0x000007FEF2FEA000-memory.dmp

    Filesize

    168KB

  • memory/2416-45-0x000007FEF2FA0000-0x000007FEF2FB3000-memory.dmp

    Filesize

    76KB

  • memory/2416-47-0x000007FEF2F40000-0x000007FEF2F52000-memory.dmp

    Filesize

    72KB

  • memory/2416-48-0x000007FEF2F20000-0x000007FEF2F31000-memory.dmp

    Filesize

    68KB

  • memory/2416-49-0x000007FEF2F00000-0x000007FEF2F12000-memory.dmp

    Filesize

    72KB

  • memory/2416-46-0x000007FEF2F60000-0x000007FEF2F7B000-memory.dmp

    Filesize

    108KB

  • memory/2416-43-0x000007FEF2FF0000-0x000007FEF30F6000-memory.dmp

    Filesize

    1.0MB

  • memory/2416-51-0x000007FEF2D60000-0x000007FEF2D75000-memory.dmp

    Filesize

    84KB

  • memory/2416-53-0x000007FEF2D20000-0x000007FEF2D34000-memory.dmp

    Filesize

    80KB

  • memory/2416-55-0x000007FEF2B80000-0x000007FEF2BE1000-memory.dmp

    Filesize

    388KB

  • memory/2416-56-0x000007FEF2B30000-0x000007FEF2B77000-memory.dmp

    Filesize

    284KB

  • memory/2416-57-0x000007FEF2AB0000-0x000007FEF2B24000-memory.dmp

    Filesize

    464KB

  • memory/2416-58-0x000007FEF2940000-0x000007FEF2951000-memory.dmp

    Filesize

    68KB

  • memory/2416-59-0x000007FEF2650000-0x000007FEF269E000-memory.dmp

    Filesize

    312KB

  • memory/2416-60-0x000007FEF25F0000-0x000007FEF2647000-memory.dmp

    Filesize

    348KB

  • memory/2416-61-0x000007FEF25B0000-0x000007FEF25E4000-memory.dmp

    Filesize

    208KB

  • memory/2416-54-0x000007FEF2BF0000-0x000007FEF2C01000-memory.dmp

    Filesize

    68KB

  • memory/2416-52-0x000007FEF2D40000-0x000007FEF2D53000-memory.dmp

    Filesize

    76KB

  • memory/2416-50-0x000007FEF2D80000-0x000007FEF2EFA000-memory.dmp

    Filesize

    1.5MB

  • memory/2416-64-0x000007FEF7BE0000-0x000007FEF7E96000-memory.dmp

    Filesize

    2.7MB