2ffa473d8de8262cfc293d79eece37080fe1db0ba39ee1620854de91696b1276

Analysis

max time kernel
30s
max time network
18s
platform
windows7_x64
resource
win7-20240705-it
resource tags

arch:x64arch:x86image:win7-20240705-itlocale:it-itos:windows7-x64systemwindows
submitted
07/08/2024, 08:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

attachment.mp4
Size

4.6MB
MD5

f1dbd7353165085bc5ed9f5071414b68
SHA1

5b56a391b84f4a785ef8a12ecd80329a655f92df
SHA256

2ffa473d8de8262cfc293d79eece37080fe1db0ba39ee1620854de91696b1276
SHA512

74bbf583d1bc961227a01fe9594852f3f0baaa32c1f679a2a99cba2d294566fc0f0034711bf18508c722c14e5570ccaee8e284b858824108788196fb155bb80f
SSDEEP

98304:tzicSDzssaIB48R6ktcnTQY+zmEYilKt7xwKpRE0Gz6/FrWE:xDw3KnTQY+6kKt7aKLu69L

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
1424	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1424	vlc.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	1424	vlc.exe
Token: SeIncBasePriorityPrivilege	1424	vlc.exe

Suspicious use of FindShellTrayWindow 58 IoCs

pid	Process
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe

Suspicious use of SendNotifyMessage 6 IoCs

pid	Process
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe
1424	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1424	vlc.exe

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\attachment.mp4"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1424

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1424-7-0x000000013F8B0000-0x000000013F9A8000-memory.dmp

Filesize
992KB

Download
memory/1424-8-0x000007FEFB500000-0x000007FEFB534000-memory.dmp

Filesize
208KB

Download
memory/1424-10-0x000007FEFC0C0000-0x000007FEFC0D8000-memory.dmp

Filesize
96KB

Download
memory/1424-16-0x000007FEFB460000-0x000007FEFB471000-memory.dmp

Filesize
68KB

Download
memory/1424-15-0x000007FEFB480000-0x000007FEFB49D000-memory.dmp

Filesize
116KB

Download
memory/1424-9-0x000007FEF7DC0000-0x000007FEF8076000-memory.dmp

Filesize
2.7MB

Download
memory/1424-14-0x000007FEFB4A0000-0x000007FEFB4B1000-memory.dmp

Filesize
68KB

Download
memory/1424-13-0x000007FEFB4C0000-0x000007FEFB4D7000-memory.dmp

Filesize
92KB

Download
memory/1424-12-0x000007FEFB4E0000-0x000007FEFB4F1000-memory.dmp

Filesize
68KB

Download
memory/1424-11-0x000007FEFB650000-0x000007FEFB667000-memory.dmp

Filesize
92KB

Download
memory/1424-17-0x000007FEF64A0000-0x000007FEF66AB000-memory.dmp

Filesize
2.0MB

Download
memory/1424-18-0x000007FEFB3C0000-0x000007FEFB401000-memory.dmp

Filesize
260KB

Download
memory/1424-29-0x000007FEF6A50000-0x000007FEF6AB7000-memory.dmp

Filesize
412KB

Download
memory/1424-32-0x000007FEF6910000-0x000007FEF6967000-memory.dmp

Filesize
348KB

Download
memory/1424-34-0x000007FEF70A0000-0x000007FEF70B7000-memory.dmp

Filesize
92KB

Download
memory/1424-33-0x000007FEF5270000-0x000007FEF53F0000-memory.dmp

Filesize
1.5MB

Download
memory/1424-45-0x000007FEF33E0000-0x000007FEF33F6000-memory.dmp

Filesize
88KB

Download
memory/1424-44-0x000007FEF67F0000-0x000007FEF6801000-memory.dmp

Filesize
68KB

Download
memory/1424-52-0x000007FEF3150000-0x000007FEF31A0000-memory.dmp

Filesize
320KB

Download
memory/1424-56-0x000007FEF2E20000-0x000007FEF2E32000-memory.dmp

Filesize
72KB

Download
memory/1424-54-0x000007FEF2E80000-0x000007FEF3130000-memory.dmp

Filesize
2.7MB

Download
memory/1424-68-0x000007FEF22C0000-0x000007FEF22F4000-memory.dmp

Filesize
208KB

Download
memory/1424-67-0x000007FEF2300000-0x000007FEF2357000-memory.dmp

Filesize
348KB

Download
memory/1424-66-0x000007FEF2360000-0x000007FEF23AE000-memory.dmp

Filesize
312KB

Download
memory/1424-65-0x000007FEF2650000-0x000007FEF2661000-memory.dmp

Filesize
68KB

Download
memory/1424-64-0x000007FEF27C0000-0x000007FEF2834000-memory.dmp

Filesize
464KB

Download
memory/1424-63-0x000007FEF2840000-0x000007FEF2887000-memory.dmp

Filesize
284KB

Download
memory/1424-62-0x000007FEF2890000-0x000007FEF28F1000-memory.dmp

Filesize
388KB

Download
memory/1424-61-0x000007FEF2900000-0x000007FEF2911000-memory.dmp

Filesize
68KB

Download
memory/1424-60-0x000007FEF2C30000-0x000007FEF2C43000-memory.dmp

Filesize
76KB

Download
memory/1424-59-0x000007FEF2C50000-0x000007FEF2C73000-memory.dmp

Filesize
140KB

Download
memory/1424-58-0x000007FEF2C80000-0x000007FEF2C95000-memory.dmp

Filesize
84KB

Download
memory/1424-57-0x000007FEF2CA0000-0x000007FEF2E1A000-memory.dmp

Filesize
1.5MB

Download
memory/1424-55-0x000007FEF2E40000-0x000007FEF2E51000-memory.dmp

Filesize
68KB

Download
memory/1424-35-0x000007FEF3A00000-0x000007FEF526F000-memory.dmp

Filesize
24.4MB

Download
memory/1424-53-0x000007FEF3130000-0x000007FEF3145000-memory.dmp

Filesize
84KB

Download
memory/1424-51-0x000007FEF31A0000-0x000007FEF31B4000-memory.dmp

Filesize
80KB

Download
memory/1424-50-0x000007FEF31C0000-0x000007FEF31D3000-memory.dmp

Filesize
76KB

Download
memory/1424-49-0x000007FEF31E0000-0x000007FEF324D000-memory.dmp

Filesize
436KB

Download
memory/1424-48-0x000007FEF3250000-0x000007FEF32B2000-memory.dmp

Filesize
392KB

Download
memory/1424-47-0x000007FEF32C0000-0x000007FEF3302000-memory.dmp

Filesize
264KB

Download
memory/1424-46-0x000007FEF3310000-0x000007FEF33D5000-memory.dmp

Filesize
788KB

Download
memory/1424-43-0x000007FEF3400000-0x000007FEF342F000-memory.dmp

Filesize
188KB

Download
memory/1424-42-0x000007FEFB710000-0x000007FEFB720000-memory.dmp

Filesize
64KB

Download
memory/1424-41-0x000007FEF6810000-0x000007FEF6867000-memory.dmp

Filesize
348KB

Download
memory/1424-40-0x000007FEF3680000-0x000007FEF37EB000-memory.dmp

Filesize
1.4MB

Download
memory/1424-39-0x000007FEF6870000-0x000007FEF68BD000-memory.dmp

Filesize
308KB

Download
memory/1424-38-0x000007FEF68C0000-0x000007FEF6902000-memory.dmp

Filesize
264KB

Download
memory/1424-37-0x000007FEF7080000-0x000007FEF7092000-memory.dmp

Filesize
72KB

Download
memory/1424-36-0x000007FEF37F0000-0x000007FEF39F6000-memory.dmp

Filesize
2.0MB

Download
memory/1424-19-0x000007FEF53F0000-0x000007FEF64A0000-memory.dmp

Filesize
16.7MB

Download
memory/1424-31-0x000007FEF7230000-0x000007FEF7241000-memory.dmp

Filesize
68KB

Download
memory/1424-30-0x000007FEF6970000-0x000007FEF69EC000-memory.dmp

Filesize
496KB

Download
memory/1424-28-0x000007FEF70C0000-0x000007FEF70F0000-memory.dmp

Filesize
192KB

Download
memory/1424-27-0x000007FEF7D80000-0x000007FEF7D98000-memory.dmp

Filesize
96KB

Download
memory/1424-26-0x000007FEF7DA0000-0x000007FEF7DB1000-memory.dmp

Filesize
68KB

Download
memory/1424-25-0x000007FEFB320000-0x000007FEFB33B000-memory.dmp

Filesize
108KB

Download
memory/1424-24-0x000007FEFB340000-0x000007FEFB351000-memory.dmp

Filesize
68KB

Download
memory/1424-23-0x000007FEFB360000-0x000007FEFB371000-memory.dmp

Filesize
68KB

Download
memory/1424-22-0x000007FEFB380000-0x000007FEFB391000-memory.dmp

Filesize
68KB

Download
memory/1424-21-0x000007FEFB3A0000-0x000007FEFB3B8000-memory.dmp

Filesize
96KB

Download
memory/1424-20-0x000007FEFB430000-0x000007FEFB451000-memory.dmp

Filesize
132KB

Download