66b077c58bca07756617e3469e3a6238dae76d411a14bc9b7d4986a7cecf6e16

General

Target

Gabriel's Message to Bike Thief (320 kbps).mp3
Size

1.2MB
MD5

31d707645793d1a2bec01c0aea70544d
SHA1

75cebdbbd30eef5e342ec5405a953b7d3f65cc0b
SHA256

66b077c58bca07756617e3469e3a6238dae76d411a14bc9b7d4986a7cecf6e16
SHA512

1ea3d5fcecb660ff9edcccc654c42472b86eb3971b0d864f7a82c509c046a544185c9d103450c618eaf66e3abc5a65cf846ee480a5e3e5a0325c3961b07a0571
SSDEEP

24576:B2lSxkffvOVT7lnR12C4KzvAs7bTMOYZ1byhlBjVnL5r:UAiv675ikTfMOCyZVV

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

vlc.exe

pid process

2756 vlc.exe
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

vlc.exe

pid process

2756 vlc.exe
Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes:

vlc.exe

description pid process

Token: 33 2756 vlc.exe
Token: SeIncBasePriorityPrivilege 2756 vlc.exe
Suspicious use of FindShellTrayWindow 9 IoCs

Processes:

vlc.exe

pid process

2756 vlc.exe
2756 vlc.exe
2756 vlc.exe
2756 vlc.exe
2756 vlc.exe
2756 vlc.exe
2756 vlc.exe
2756 vlc.exe
2756 vlc.exe
Suspicious use of SendNotifyMessage 8 IoCs

Processes:

vlc.exe

pid process

2756 vlc.exe
2756 vlc.exe
2756 vlc.exe
2756 vlc.exe
2756 vlc.exe
2756 vlc.exe
2756 vlc.exe
2756 vlc.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

vlc.exe

pid process

2756 vlc.exe

pid	process
2756	vlc.exe

pid	process
2756	vlc.exe

description	pid	process
Token: 33	2756	vlc.exe
Token: SeIncBasePriorityPrivilege	2756	vlc.exe

pid	process
2756	vlc.exe
2756	vlc.exe
2756	vlc.exe
2756	vlc.exe
2756	vlc.exe
2756	vlc.exe
2756	vlc.exe
2756	vlc.exe
2756	vlc.exe

pid	process
2756	vlc.exe
2756	vlc.exe
2756	vlc.exe
2756	vlc.exe
2756	vlc.exe
2756	vlc.exe
2756	vlc.exe
2756	vlc.exe

pid	process
2756	vlc.exe

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Gabriel's Message to Bike Thief (320 kbps).mp3"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2756-6-0x000007FEF7A70000-0x000007FEF7AA4000-memory.dmp

Filesize
208KB

Download
memory/2756-5-0x000000013F6A0000-0x000000013F798000-memory.dmp

Filesize
992KB

Download
memory/2756-11-0x000007FEF6F20000-0x000007FEF6F37000-memory.dmp

Filesize
92KB

Download
memory/2756-7-0x000007FEF6270000-0x000007FEF6526000-memory.dmp

Filesize
2.7MB

Download
memory/2756-14-0x000007FEF6EC0000-0x000007FEF6ED1000-memory.dmp

Filesize
68KB

Download
memory/2756-13-0x000007FEF6EE0000-0x000007FEF6EFD000-memory.dmp

Filesize
116KB

Download
memory/2756-12-0x000007FEF6F00000-0x000007FEF6F11000-memory.dmp

Filesize
68KB

Download
memory/2756-10-0x000007FEF7A50000-0x000007FEF7A61000-memory.dmp

Filesize
68KB

Download
memory/2756-9-0x000007FEFB340000-0x000007FEFB357000-memory.dmp

Filesize
92KB

Download
memory/2756-8-0x000007FEFBCF0000-0x000007FEFBD08000-memory.dmp

Filesize
96KB

Download
memory/2756-15-0x000007FEF6060000-0x000007FEF626B000-memory.dmp

Filesize
2.0MB

Download
memory/2756-17-0x000007FEF6A00000-0x000007FEF6A41000-memory.dmp

Filesize
260KB

Download
memory/2756-22-0x000007FEF6950000-0x000007FEF6961000-memory.dmp

Filesize
68KB

Download
memory/2756-24-0x000007FEF6910000-0x000007FEF6921000-memory.dmp

Filesize
68KB

Download
memory/2756-27-0x000007FEF4F40000-0x000007FEF4FA7000-memory.dmp

Filesize
412KB

Download
memory/2756-31-0x000007FEF4E80000-0x000007FEF4E91000-memory.dmp

Filesize
68KB

Download
memory/2756-39-0x000007FEF2E50000-0x000007FEF2E61000-memory.dmp

Filesize
68KB

Download
memory/2756-41-0x000007FEF2CB0000-0x000007FEF2E2A000-memory.dmp

Filesize
1.5MB

Download
memory/2756-16-0x000007FEF4FB0000-0x000007FEF6060000-memory.dmp

Filesize
16.7MB

Download
memory/2756-40-0x000007FEF2E30000-0x000007FEF2E42000-memory.dmp

Filesize
72KB

Download
memory/2756-38-0x000007FEF3030000-0x000007FEF3058000-memory.dmp

Filesize
160KB

Download
memory/2756-37-0x000007FEF3060000-0x000007FEF30B7000-memory.dmp

Filesize
348KB

Download
memory/2756-36-0x000007FEF4CE0000-0x000007FEF4DA5000-memory.dmp

Filesize
788KB

Download
memory/2756-35-0x000007FEF4DB0000-0x000007FEF4DC1000-memory.dmp

Filesize
68KB

Download
memory/2756-34-0x000007FEF4DD0000-0x000007FEF4DE3000-memory.dmp

Filesize
76KB

Download
memory/2756-33-0x000007FEF4DF0000-0x000007FEF4E1F000-memory.dmp

Filesize
188KB

Download
memory/2756-32-0x000007FEF4E20000-0x000007FEF4E77000-memory.dmp

Filesize
348KB

Download
memory/2756-30-0x000007FEF4EA0000-0x000007FEF4EB8000-memory.dmp

Filesize
96KB

Download
memory/2756-29-0x000007FEF68A0000-0x000007FEF68B1000-memory.dmp

Filesize
68KB

Download
memory/2756-28-0x000007FEF4EC0000-0x000007FEF4F3C000-memory.dmp

Filesize
496KB

Download
memory/2756-26-0x000007FEF68C0000-0x000007FEF68F0000-memory.dmp

Filesize
192KB

Download
memory/2756-25-0x000007FEF68F0000-0x000007FEF6908000-memory.dmp

Filesize
96KB

Download
memory/2756-23-0x000007FEF6930000-0x000007FEF694B000-memory.dmp

Filesize
108KB

Download
memory/2756-21-0x000007FEF6970000-0x000007FEF6981000-memory.dmp

Filesize
68KB

Download
memory/2756-20-0x000007FEF6990000-0x000007FEF69A1000-memory.dmp

Filesize
68KB

Download
memory/2756-19-0x000007FEF69B0000-0x000007FEF69C8000-memory.dmp

Filesize
96KB

Download
memory/2756-18-0x000007FEF69D0000-0x000007FEF69F1000-memory.dmp

Filesize
132KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads