Analysis

  • max time kernel
    16s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    07/08/2024, 01:00

General

  • Target

    30 Second Trailer - Mamoune Taleb.wav

  • Size

    4.6MB

  • MD5

    559aedcb22bc86f988ad1cd0928f99aa

  • SHA1

    a1632948ceb2d4c1ea4477a6153d26a8f077768f

  • SHA256

    262062ae2fa2381b198996218b27c88b159121dec955ab9818b6282dc3fdafd7

  • SHA512

    d4081fba47356f8601813d4bc8b61ce1c95fcec1ad925acddb44f7e0a3e9cee4d7cae8c4c1211fb3c984c011aae8fb1e52e5106e981b6aba16bdceee86fc5cd0

  • SSDEEP

    98304:4PRYWzu7ctZmAhwLZPcQk7VwSjV534T4/VqgmhfLntEZ:49yctZnoZ0Qk7VwU/VufLS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\30 Second Trailer - Mamoune Taleb.wav"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:3056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3056-8-0x000007FEF7060000-0x000007FEF7094000-memory.dmp

    Filesize

    208KB

  • memory/3056-7-0x000000013F400000-0x000000013F4F8000-memory.dmp

    Filesize

    992KB

  • memory/3056-10-0x000007FEFBB30000-0x000007FEFBB48000-memory.dmp

    Filesize

    96KB

  • memory/3056-14-0x000007FEF6EF0000-0x000007FEF6F01000-memory.dmp

    Filesize

    68KB

  • memory/3056-9-0x000007FEF6330000-0x000007FEF65E6000-memory.dmp

    Filesize

    2.7MB

  • memory/3056-13-0x000007FEF6F10000-0x000007FEF6F27000-memory.dmp

    Filesize

    92KB

  • memory/3056-15-0x000007FEF6AF0000-0x000007FEF6B0D000-memory.dmp

    Filesize

    116KB

  • memory/3056-12-0x000007FEF7980000-0x000007FEF7991000-memory.dmp

    Filesize

    68KB

  • memory/3056-16-0x000007FEF6AD0000-0x000007FEF6AE1000-memory.dmp

    Filesize

    68KB

  • memory/3056-11-0x000007FEF7B20000-0x000007FEF7B37000-memory.dmp

    Filesize

    92KB

  • memory/3056-18-0x000007FEF5070000-0x000007FEF527B000-memory.dmp

    Filesize

    2.0MB

  • memory/3056-23-0x000007FEF69F0000-0x000007FEF6A01000-memory.dmp

    Filesize

    68KB

  • memory/3056-25-0x000007FEF69B0000-0x000007FEF69CB000-memory.dmp

    Filesize

    108KB

  • memory/3056-29-0x000007FEF4FD0000-0x000007FEF5037000-memory.dmp

    Filesize

    412KB

  • memory/3056-28-0x000007FEF5040000-0x000007FEF5070000-memory.dmp

    Filesize

    192KB

  • memory/3056-27-0x000007FEF6970000-0x000007FEF6988000-memory.dmp

    Filesize

    96KB

  • memory/3056-26-0x000007FEF6990000-0x000007FEF69A1000-memory.dmp

    Filesize

    68KB

  • memory/3056-24-0x000007FEF69D0000-0x000007FEF69E1000-memory.dmp

    Filesize

    68KB

  • memory/3056-22-0x000007FEF6A10000-0x000007FEF6A21000-memory.dmp

    Filesize

    68KB

  • memory/3056-17-0x000007FEF5280000-0x000007FEF6330000-memory.dmp

    Filesize

    16.7MB

  • memory/3056-31-0x000007FEF4F30000-0x000007FEF4F41000-memory.dmp

    Filesize

    68KB

  • memory/3056-30-0x000007FEF4F50000-0x000007FEF4FCC000-memory.dmp

    Filesize

    496KB

  • memory/3056-33-0x000007FEF4EA0000-0x000007FEF4EC8000-memory.dmp

    Filesize

    160KB

  • memory/3056-32-0x000007FEF4ED0000-0x000007FEF4F27000-memory.dmp

    Filesize

    348KB

  • memory/3056-34-0x000007FEF4E70000-0x000007FEF4E94000-memory.dmp

    Filesize

    144KB

  • memory/3056-35-0x000007FEF4E50000-0x000007FEF4E68000-memory.dmp

    Filesize

    96KB

  • memory/3056-39-0x000007FEF7530000-0x000007FEF7540000-memory.dmp

    Filesize

    64KB

  • memory/3056-40-0x000007FEF4BC0000-0x000007FEF4BEF000-memory.dmp

    Filesize

    188KB

  • memory/3056-42-0x000007FEF4B80000-0x000007FEF4B96000-memory.dmp

    Filesize

    88KB

  • memory/3056-45-0x000007FEF4B00000-0x000007FEF4B12000-memory.dmp

    Filesize

    72KB

  • memory/3056-46-0x000007FEF4AE0000-0x000007FEF4AF2000-memory.dmp

    Filesize

    72KB

  • memory/3056-44-0x000007FEF4B20000-0x000007FEF4B31000-memory.dmp

    Filesize

    68KB

  • memory/3056-43-0x000007FEF4B60000-0x000007FEF4B75000-memory.dmp

    Filesize

    84KB

  • memory/3056-41-0x000007FEF4BA0000-0x000007FEF4BB1000-memory.dmp

    Filesize

    68KB

  • memory/3056-38-0x000007FEF4DE0000-0x000007FEF4DF2000-memory.dmp

    Filesize

    72KB

  • memory/3056-37-0x000007FEF4E00000-0x000007FEF4E11000-memory.dmp

    Filesize

    68KB

  • memory/3056-36-0x000007FEF4E20000-0x000007FEF4E43000-memory.dmp

    Filesize

    140KB

  • memory/3056-21-0x000007FEF6A30000-0x000007FEF6A48000-memory.dmp

    Filesize

    96KB

  • memory/3056-20-0x000007FEF6A50000-0x000007FEF6A71000-memory.dmp

    Filesize

    132KB

  • memory/3056-19-0x000007FEF6A80000-0x000007FEF6AC1000-memory.dmp

    Filesize

    260KB

  • memory/3056-47-0x000007FEF4960000-0x000007FEF4ADA000-memory.dmp

    Filesize

    1.5MB

  • memory/3056-48-0x000007FEF4940000-0x000007FEF4953000-memory.dmp

    Filesize

    76KB

  • memory/3056-50-0x000007FEF4900000-0x000007FEF4911000-memory.dmp

    Filesize

    68KB

  • memory/3056-51-0x000007FEF48E0000-0x000007FEF48F1000-memory.dmp

    Filesize

    68KB

  • memory/3056-52-0x000007FEF48C0000-0x000007FEF48D1000-memory.dmp

    Filesize

    68KB

  • memory/3056-49-0x000007FEF4920000-0x000007FEF4934000-memory.dmp

    Filesize

    80KB