Overview
overview
3Static
static
1Phonk CD 2...98.rar
windows7-x64
Phonk CD 2...rt.png
windows7-x64
1Phonk CD 2...k1.ogg
windows7-x64
1Phonk CD 2...10.ogg
windows7-x64
1Phonk CD 2...11.ogg
windows7-x64
1Phonk CD 2...12.ogg
windows7-x64
1Phonk CD 2...k2.ogg
windows7-x64
1Phonk CD 2...k3.ogg
windows7-x64
1Phonk CD 2...k4.ogg
windows7-x64
1Phonk CD 2...k5.ogg
windows7-x64
Phonk CD 2...k6.ogg
windows7-x64
1Phonk CD 2...k7.ogg
windows7-x64
1Phonk CD 2...k8.ogg
windows7-x64
1Phonk CD 2...k9.ogg
windows7-x64
1Analysis
-
max time kernel
131s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
02/08/2024, 15:26
Static task
static1
Behavioral task
behavioral1
Sample
Phonk CD 2.0-1620-2-0-1695166698.rar
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Phonk CD 2.0/coverart.png
Resource
win7-20240729-en
Behavioral task
behavioral3
Sample
Phonk CD 2.0/track1.ogg
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
Phonk CD 2.0/track10.ogg
Resource
win7-20240705-en
Behavioral task
behavioral5
Sample
Phonk CD 2.0/track11.ogg
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
Phonk CD 2.0/track12.ogg
Resource
win7-20240708-en
Behavioral task
behavioral7
Sample
Phonk CD 2.0/track2.ogg
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Phonk CD 2.0/track3.ogg
Resource
win7-20240704-en
Behavioral task
behavioral9
Sample
Phonk CD 2.0/track4.ogg
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
Phonk CD 2.0/track5.ogg
Resource
win7-20240729-en
Behavioral task
behavioral11
Sample
Phonk CD 2.0/track6.ogg
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Phonk CD 2.0/track7.ogg
Resource
win7-20240704-en
Behavioral task
behavioral13
Sample
Phonk CD 2.0/track8.ogg
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
Phonk CD 2.0/track9.ogg
Resource
win7-20240705-en
General
-
Target
Phonk CD 2.0/track3.ogg
-
Size
5.2MB
-
MD5
4fccce92cd79f6e8164e29a27dbbf013
-
SHA1
f16646ab3972b9c2c8af89e3d5b5cd9acbd1d56c
-
SHA256
63601509a357899b7c30ae07495f6269dcdbf43b2e9acd3d19e6edfd29dd9eaa
-
SHA512
dabdb57a902a3599cb9d0d15e62c09af3cac7cc67f44d8d3d39966f44b778dcc22bfafe7ecb44c461326b52da9f672c1e0a3ae4deef36c3f44402246dfafebc8
-
SSDEEP
98304:6aLMxw5y9w8A2KqOvSSF2tHJKUNNaIkDgKKB5BEkWrlQryL43SH7fdF8xPuWd2A/:JYC5y+cKqz5KXRRcBMQ2L46fdF8x27A/
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1940 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1940 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 1940 vlc.exe Token: SeIncBasePriorityPrivilege 1940 vlc.exe -
Suspicious use of FindShellTrayWindow 5 IoCs
pid Process 1940 vlc.exe 1940 vlc.exe 1940 vlc.exe 1940 vlc.exe 1940 vlc.exe -
Suspicious use of SendNotifyMessage 4 IoCs
pid Process 1940 vlc.exe 1940 vlc.exe 1940 vlc.exe 1940 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1940 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Phonk CD 2.0\track3.ogg"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1940