Analysis
- max time kernel
141s - max time network
136s - platform
windows7_x64 - resource
win7-20240704-en - resource tags
- submitted
27/07/2024, 06:01
General
- Target bin/Monaco/package/esm/vs/language/json/fillers/monaco-editor-core.d.ts
- Size 37B
- Sample240727-gq2ssstdkh
- SHA256 87b3728d7af0f6c25f9cdbedfbc093f5e46a24371910199a638a1a13e3444668
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\bin\Monaco\package\esm\vs\language\json\fillers\monaco-editor-core.d.ts"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2564-5-0x000000013F910000-0x000000013FA08000-memory.dmp
memory/2564-6-0x000007FEF6F60000-0x000007FEF6F94000-memory.dmp
memory/2564-7-0x000007FEF5740000-0x000007FEF59F6000-memory.dmp
memory/2564-8-0x000007FEFAE10000-0x000007FEFAE28000-memory.dmp
memory/2564-9-0x000007FEF7210000-0x000007FEF7227000-memory.dmp
memory/2564-10-0x000007FEF6F40000-0x000007FEF6F51000-memory.dmp
memory/2564-11-0x000007FEF6380000-0x000007FEF6397000-memory.dmp
memory/2564-12-0x000007FEF6360000-0x000007FEF6371000-memory.dmp
memory/2564-13-0x000007FEF6340000-0x000007FEF635D000-memory.dmp
memory/2564-14-0x000007FEF6320000-0x000007FEF6331000-memory.dmp
memory/2564-21-0x000007FEF5E60000-0x000007FEF5E71000-memory.dmp
memory/2564-20-0x000007FEF5E80000-0x000007FEF5E91000-memory.dmp
memory/2564-19-0x000007FEF5F10000-0x000007FEF5F28000-memory.dmp
memory/2564-22-0x000007FEF5E40000-0x000007FEF5E51000-memory.dmp
memory/2564-18-0x000007FEF5EA0000-0x000007FEF5EC1000-memory.dmp
memory/2564-16-0x000007FEF4480000-0x000007FEF468B000-memory.dmp
memory/2564-23-0x000007FEF5E20000-0x000007FEF5E3B000-memory.dmp
memory/2564-17-0x000007FEF5F30000-0x000007FEF5F71000-memory.dmp
memory/2564-24-0x000007FEF5E00000-0x000007FEF5E11000-memory.dmp
memory/2564-25-0x000007FEF5DE0000-0x000007FEF5DF8000-memory.dmp
memory/2564-26-0x000007FEF5DB0000-0x000007FEF5DE0000-memory.dmp
memory/2564-27-0x000007FEF4410000-0x000007FEF4477000-memory.dmp
memory/2564-28-0x000007FEF4390000-0x000007FEF440C000-memory.dmp
memory/2564-29-0x000007FEF5D90000-0x000007FEF5DA1000-memory.dmp
memory/2564-15-0x000007FEF4690000-0x000007FEF5740000-memory.dmp
memory/2564-30-0x000007FEF4330000-0x000007FEF4387000-memory.dmp
memory/2564-31-0x000007FEF4300000-0x000007FEF4328000-memory.dmp
memory/2564-32-0x000007FEF42D0000-0x000007FEF42F4000-memory.dmp
memory/2564-33-0x000007FEF5D70000-0x000007FEF5D88000-memory.dmp
memory/2564-34-0x000007FEF42A0000-0x000007FEF42C3000-memory.dmp
memory/2564-35-0x000007FEF4280000-0x000007FEF4291000-memory.dmp
memory/2564-36-0x000007FEF4260000-0x000007FEF4272000-memory.dmp
memory/2564-37-0x000007FEF39D0000-0x000007FEF3A05000-memory.dmp
memory/2564-38-0x000007FEF39A0000-0x000007FEF39C5000-memory.dmp
memory/2564-40-0x000007FEF1AA0000-0x000007FEF1AB7000-memory.dmp
memory/2564-39-0x000007FEF1AC0000-0x000007FEF1C40000-memory.dmp