Resubmissions

03-08-2024 14:36

240803-ryw8dswelq 10

03-08-2024 14:34

240803-rxs5cawejl 6

03-08-2024 14:30

240803-rvcpkswdkr 6

Analysis

  • max time kernel
    21s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    03-08-2024 14:34

General

  • Target

    gothymilly76b779.mp4

  • Size

    261KB

  • MD5

    d3d13a4ac1f069c0c305836dca7a79f4

  • SHA1

    9b3fdb93a1e59d3238b110bef6a56ddc4c94c449

  • SHA256

    86c8812621c9af04b428b99aeb96627a340c3810d2bdb1053d2fb0357337a99e

  • SHA512

    f3f8a5814fab743ab4f3f31f800ef66171673dbacbe66722e2a865cc97fc3e59deb2655da10e5ac84826d3fcb2c4ee0d671c7d0179a0b6e3ee850f43b348515f

  • SSDEEP

    6144:lPL62UN2BRLvehowE4wFFrAuROLFgCRofacyfI5IhdgDJkihg8T0t+:d7A2DvehXwb0uRCg7fa9w5KCdV1b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 28 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\gothymilly76b779.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1848-7-0x000000013F9A0000-0x000000013FA98000-memory.dmp

    Filesize

    992KB

  • memory/1848-8-0x000007FEFAC10000-0x000007FEFAC44000-memory.dmp

    Filesize

    208KB

  • memory/1848-9-0x000007FEF75C0000-0x000007FEF7876000-memory.dmp

    Filesize

    2.7MB

  • memory/1848-13-0x000007FEFA920000-0x000007FEFA937000-memory.dmp

    Filesize

    92KB

  • memory/1848-12-0x000007FEFA940000-0x000007FEFA951000-memory.dmp

    Filesize

    68KB

  • memory/1848-11-0x000007FEFA960000-0x000007FEFA977000-memory.dmp

    Filesize

    92KB

  • memory/1848-10-0x000007FEFAEC0000-0x000007FEFAED8000-memory.dmp

    Filesize

    96KB

  • memory/1848-14-0x000007FEFA900000-0x000007FEFA911000-memory.dmp

    Filesize

    68KB

  • memory/1848-15-0x000007FEFA8E0000-0x000007FEFA8FD000-memory.dmp

    Filesize

    116KB

  • memory/1848-16-0x000007FEFA8A0000-0x000007FEFA8B1000-memory.dmp

    Filesize

    68KB

  • memory/1848-17-0x000007FEF5D50000-0x000007FEF5F5B000-memory.dmp

    Filesize

    2.0MB

  • memory/1848-20-0x000007FEF6630000-0x000007FEF6651000-memory.dmp

    Filesize

    132KB

  • memory/1848-19-0x000007FEF6660000-0x000007FEF66A1000-memory.dmp

    Filesize

    260KB

  • memory/1848-23-0x000007FEF65F0000-0x000007FEF6601000-memory.dmp

    Filesize

    68KB

  • memory/1848-28-0x000007FEF6540000-0x000007FEF6570000-memory.dmp

    Filesize

    192KB

  • memory/1848-27-0x000007FEF6570000-0x000007FEF6588000-memory.dmp

    Filesize

    96KB

  • memory/1848-29-0x000007FEF64D0000-0x000007FEF6537000-memory.dmp

    Filesize

    412KB

  • memory/1848-26-0x000007FEF6590000-0x000007FEF65A1000-memory.dmp

    Filesize

    68KB

  • memory/1848-25-0x000007FEF65B0000-0x000007FEF65CB000-memory.dmp

    Filesize

    108KB

  • memory/1848-32-0x000007FEF5C50000-0x000007FEF5CA7000-memory.dmp

    Filesize

    348KB

  • memory/1848-31-0x000007FEF5CB0000-0x000007FEF5CC1000-memory.dmp

    Filesize

    68KB

  • memory/1848-30-0x000007FEF5CD0000-0x000007FEF5D4C000-memory.dmp

    Filesize

    496KB

  • memory/1848-18-0x000007FEF4510000-0x000007FEF55C0000-memory.dmp

    Filesize

    16.7MB

  • memory/1848-24-0x000007FEF65D0000-0x000007FEF65E1000-memory.dmp

    Filesize

    68KB

  • memory/1848-22-0x000007FEF6610000-0x000007FEF6621000-memory.dmp

    Filesize

    68KB

  • memory/1848-21-0x000007FEF75A0000-0x000007FEF75B8000-memory.dmp

    Filesize

    96KB

  • memory/1848-33-0x000007FEF5AD0000-0x000007FEF5C50000-memory.dmp

    Filesize

    1.5MB

  • memory/1848-34-0x000007FEF5AB0000-0x000007FEF5AC7000-memory.dmp

    Filesize

    92KB

  • memory/1848-38-0x000007FEF5830000-0x000007FEF5872000-memory.dmp

    Filesize

    264KB

  • memory/1848-37-0x000007FEF5880000-0x000007FEF5892000-memory.dmp

    Filesize

    72KB

  • memory/1848-39-0x000007FEF57E0000-0x000007FEF582D000-memory.dmp

    Filesize

    308KB

  • memory/1848-36-0x000007FEF58A0000-0x000007FEF5AA6000-memory.dmp

    Filesize

    2.0MB

  • memory/1848-41-0x000007FEF5610000-0x000007FEF5667000-memory.dmp

    Filesize

    348KB

  • memory/1848-40-0x000007FEF5670000-0x000007FEF57DB000-memory.dmp

    Filesize

    1.4MB

  • memory/1848-42-0x000007FEF2A50000-0x000007FEF2C91000-memory.dmp

    Filesize

    2.3MB

  • memory/1848-46-0x000007FEF2A10000-0x000007FEF2A26000-memory.dmp

    Filesize

    88KB

  • memory/1848-45-0x000007FEF2A30000-0x000007FEF2A41000-memory.dmp

    Filesize

    68KB

  • memory/1848-44-0x000007FEF55E0000-0x000007FEF560F000-memory.dmp

    Filesize

    188KB

  • memory/1848-43-0x000007FEFB380000-0x000007FEFB390000-memory.dmp

    Filesize

    64KB

  • memory/1848-47-0x000007FEF2940000-0x000007FEF2A05000-memory.dmp

    Filesize

    788KB

  • memory/1848-48-0x000007FEF28F0000-0x000007FEF2932000-memory.dmp

    Filesize

    264KB

  • memory/1848-49-0x000007FEF2880000-0x000007FEF28E2000-memory.dmp

    Filesize

    392KB

  • memory/1848-50-0x000007FEF2810000-0x000007FEF287D000-memory.dmp

    Filesize

    436KB

  • memory/1848-51-0x000007FEF27F0000-0x000007FEF2803000-memory.dmp

    Filesize

    76KB

  • memory/1848-52-0x000007FEF27D0000-0x000007FEF27E4000-memory.dmp

    Filesize

    80KB

  • memory/1848-56-0x000007FEF2440000-0x000007FEF2453000-memory.dmp

    Filesize

    76KB

  • memory/1848-55-0x000007FEF2460000-0x000007FEF2483000-memory.dmp

    Filesize

    140KB

  • memory/1848-53-0x000007FEF24B0000-0x000007FEF2760000-memory.dmp

    Filesize

    2.7MB

  • memory/1848-58-0x000007FEF22E0000-0x000007FEF230A000-memory.dmp

    Filesize

    168KB

  • memory/1848-60-0x000007FEF1EC0000-0x000007FEF1F21000-memory.dmp

    Filesize

    388KB

  • memory/1848-59-0x000007FEF1F30000-0x000007FEF1F41000-memory.dmp

    Filesize

    68KB

  • memory/1848-35-0x000007FEF2CA0000-0x000007FEF450F000-memory.dmp

    Filesize

    24.4MB

  • memory/1848-57-0x000007FEF2330000-0x000007FEF2436000-memory.dmp

    Filesize

    1.0MB

  • memory/1848-54-0x000007FEF2490000-0x000007FEF24A5000-memory.dmp

    Filesize

    84KB

  • memory/1848-61-0x000007FEF1E70000-0x000007FEF1EB7000-memory.dmp

    Filesize

    284KB

  • memory/1848-62-0x000007FEF1DF0000-0x000007FEF1E64000-memory.dmp

    Filesize

    464KB

  • memory/1848-63-0x000007FEF1C80000-0x000007FEF1C91000-memory.dmp

    Filesize

    68KB

  • memory/1848-64-0x000007FEF1920000-0x000007FEF196E000-memory.dmp

    Filesize

    312KB

  • memory/1848-65-0x000007FEF18C0000-0x000007FEF1917000-memory.dmp

    Filesize

    348KB

  • memory/1848-66-0x000007FEF1880000-0x000007FEF18B4000-memory.dmp

    Filesize

    208KB

  • memory/1848-69-0x000007FEF75C0000-0x000007FEF7876000-memory.dmp

    Filesize

    2.7MB