Analysis
-
max time kernel
140s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
05-08-2024 13:16
Static task
static1
Behavioral task
behavioral1
Sample
WFDEm1aZ8EgiCE7M.mp4
Resource
win7-20240705-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
WFDEm1aZ8EgiCE7M.mp4
Resource
win10v2004-20240802-en
windows10-2004-x64
9 signatures
150 seconds
General
-
Target
WFDEm1aZ8EgiCE7M.mp4
-
Size
322KB
-
MD5
ec6f11ebd753ce588f358c54ec1b0f6e
-
SHA1
30aec1204b838f72bb758431e659cb659831dcc5
-
SHA256
c90cc6b79aef8fb1065396e6975d1492b7eca2eb0aded8e12f7f49cd08c1a413
-
SHA512
5e20f5a24ae223ed4ad9ea1d39a35d4fee9c726f8dd3af080b99e3cccc2216aafb739855c4727f1553a4545f5acec5e4f52725e33605f51b5a7cd7be8798a3e7
-
SSDEEP
6144:Tu2mrr1duAEx7vl/bURomfOc/KR38nWO4LhNG42WQ9V:TYrrPWxbBHGONmWRG42WsV
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2728 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2728 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2728 vlc.exe Token: SeIncBasePriorityPrivilege 2728 vlc.exe -
Suspicious use of FindShellTrayWindow 28 IoCs
pid Process 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe 2728 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2728 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\WFDEm1aZ8EgiCE7M.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2728