Analysis

  • max time kernel
    141s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    27/07/2024, 06:01

General

  • Target

    bin/Monaco/package/esm/vs/language/json/fillers/monaco-editor-core.d.ts

  • Size

    37B

  • MD5

    604924c7fd140e65f677cff5c06ea77e

  • SHA1

    60adb20bf4cac895df6b31a4da98a4d2267ca3e6

  • SHA256

    87b3728d7af0f6c25f9cdbedfbc093f5e46a24371910199a638a1a13e3444668

  • SHA512

    34affd619893b93ebfeb0d19daf6c4768b0e3de7d4d8272058cd41608ef9a1f5ceb5951b0b8a7732dd4e3e020d51bda9c9509eed4a3a5705d3a1ad396d610af1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\bin\Monaco\package\esm\vs\language\json\fillers\monaco-editor-core.d.ts"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2564-5-0x000000013F910000-0x000000013FA08000-memory.dmp

    Filesize

    992KB

  • memory/2564-6-0x000007FEF6F60000-0x000007FEF6F94000-memory.dmp

    Filesize

    208KB

  • memory/2564-7-0x000007FEF5740000-0x000007FEF59F6000-memory.dmp

    Filesize

    2.7MB

  • memory/2564-8-0x000007FEFAE10000-0x000007FEFAE28000-memory.dmp

    Filesize

    96KB

  • memory/2564-9-0x000007FEF7210000-0x000007FEF7227000-memory.dmp

    Filesize

    92KB

  • memory/2564-10-0x000007FEF6F40000-0x000007FEF6F51000-memory.dmp

    Filesize

    68KB

  • memory/2564-11-0x000007FEF6380000-0x000007FEF6397000-memory.dmp

    Filesize

    92KB

  • memory/2564-12-0x000007FEF6360000-0x000007FEF6371000-memory.dmp

    Filesize

    68KB

  • memory/2564-13-0x000007FEF6340000-0x000007FEF635D000-memory.dmp

    Filesize

    116KB

  • memory/2564-14-0x000007FEF6320000-0x000007FEF6331000-memory.dmp

    Filesize

    68KB

  • memory/2564-21-0x000007FEF5E60000-0x000007FEF5E71000-memory.dmp

    Filesize

    68KB

  • memory/2564-20-0x000007FEF5E80000-0x000007FEF5E91000-memory.dmp

    Filesize

    68KB

  • memory/2564-19-0x000007FEF5F10000-0x000007FEF5F28000-memory.dmp

    Filesize

    96KB

  • memory/2564-22-0x000007FEF5E40000-0x000007FEF5E51000-memory.dmp

    Filesize

    68KB

  • memory/2564-18-0x000007FEF5EA0000-0x000007FEF5EC1000-memory.dmp

    Filesize

    132KB

  • memory/2564-16-0x000007FEF4480000-0x000007FEF468B000-memory.dmp

    Filesize

    2.0MB

  • memory/2564-23-0x000007FEF5E20000-0x000007FEF5E3B000-memory.dmp

    Filesize

    108KB

  • memory/2564-17-0x000007FEF5F30000-0x000007FEF5F71000-memory.dmp

    Filesize

    260KB

  • memory/2564-24-0x000007FEF5E00000-0x000007FEF5E11000-memory.dmp

    Filesize

    68KB

  • memory/2564-25-0x000007FEF5DE0000-0x000007FEF5DF8000-memory.dmp

    Filesize

    96KB

  • memory/2564-26-0x000007FEF5DB0000-0x000007FEF5DE0000-memory.dmp

    Filesize

    192KB

  • memory/2564-27-0x000007FEF4410000-0x000007FEF4477000-memory.dmp

    Filesize

    412KB

  • memory/2564-28-0x000007FEF4390000-0x000007FEF440C000-memory.dmp

    Filesize

    496KB

  • memory/2564-29-0x000007FEF5D90000-0x000007FEF5DA1000-memory.dmp

    Filesize

    68KB

  • memory/2564-15-0x000007FEF4690000-0x000007FEF5740000-memory.dmp

    Filesize

    16.7MB

  • memory/2564-30-0x000007FEF4330000-0x000007FEF4387000-memory.dmp

    Filesize

    348KB

  • memory/2564-31-0x000007FEF4300000-0x000007FEF4328000-memory.dmp

    Filesize

    160KB

  • memory/2564-32-0x000007FEF42D0000-0x000007FEF42F4000-memory.dmp

    Filesize

    144KB

  • memory/2564-33-0x000007FEF5D70000-0x000007FEF5D88000-memory.dmp

    Filesize

    96KB

  • memory/2564-34-0x000007FEF42A0000-0x000007FEF42C3000-memory.dmp

    Filesize

    140KB

  • memory/2564-35-0x000007FEF4280000-0x000007FEF4291000-memory.dmp

    Filesize

    68KB

  • memory/2564-36-0x000007FEF4260000-0x000007FEF4272000-memory.dmp

    Filesize

    72KB

  • memory/2564-37-0x000007FEF39D0000-0x000007FEF3A05000-memory.dmp

    Filesize

    212KB

  • memory/2564-38-0x000007FEF39A0000-0x000007FEF39C5000-memory.dmp

    Filesize

    148KB

  • memory/2564-40-0x000007FEF1AA0000-0x000007FEF1AB7000-memory.dmp

    Filesize

    92KB

  • memory/2564-39-0x000007FEF1AC0000-0x000007FEF1C40000-memory.dmp

    Filesize

    1.5MB