5094123e4491bddf9dae76bd0df096e95ec2541f25deab25913e105c2b6e8f1b

Analysis

max time kernel
15s
max time network
15s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
08/08/2024, 23:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Allah Yoruya sabır versin #valorant #valorantlive #valoranttr.mp4
Size

27.2MB
MD5

2bd4869fdddc1d402c304c92d1b5b6f9
SHA1

bf21ef369c40488c1d3f33aea898943fc6781775
SHA256

5094123e4491bddf9dae76bd0df096e95ec2541f25deab25913e105c2b6e8f1b
SHA512

68c8bb67fef9e8859751e6338c876002b3ff302d6d1ab0da5918424d798770d650cd767fc65435f0e4a7aa9bedd9856e1f175e0cbd20760cea0fd1f64642a957
SSDEEP

786432:K1EXbkQOUifk+zYZeHYz2osmhyl2lU/wVXm6N9aNVVQb:YEwQifk+ziwYCo6WU/wV26cVib

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
1964	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1964	vlc.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	1964	vlc.exe
Token: SeIncBasePriorityPrivilege	1964	vlc.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe

Suspicious use of SendNotifyMessage 9 IoCs

pid	Process
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe
1964	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1964	vlc.exe

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Allah Yoruya sabır versin #valorant #valorantlive #valoranttr.mp4"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1964-7-0x000000013FD50000-0x000000013FE48000-memory.dmp

Filesize
992KB

Download
memory/1964-8-0x000007FEFB500000-0x000007FEFB534000-memory.dmp

Filesize
208KB

Download
memory/1964-12-0x000007FEFB690000-0x000007FEFB6A1000-memory.dmp

Filesize
68KB

Download
memory/1964-15-0x000007FEF7E60000-0x000007FEF7E7D000-memory.dmp

Filesize
116KB

Download
memory/1964-9-0x000007FEF6810000-0x000007FEF6AC6000-memory.dmp

Filesize
2.7MB

Download
memory/1964-14-0x000007FEF7E80000-0x000007FEF7E91000-memory.dmp

Filesize
68KB

Download
memory/1964-13-0x000007FEFB160000-0x000007FEFB177000-memory.dmp

Filesize
92KB

Download
memory/1964-11-0x000007FEFB730000-0x000007FEFB747000-memory.dmp

Filesize
92KB

Download
memory/1964-10-0x000007FEFBD10000-0x000007FEFBD28000-memory.dmp

Filesize
96KB

Download
memory/1964-17-0x000007FEF7E40000-0x000007FEF7E51000-memory.dmp

Filesize
68KB

Download
memory/1964-16-0x000007FEF6600000-0x000007FEF680B000-memory.dmp

Filesize
2.0MB

Download
memory/1964-18-0x000007FEF7DF0000-0x000007FEF7E31000-memory.dmp

Filesize
260KB

Download
memory/1964-20-0x000007FEF7DC0000-0x000007FEF7DE1000-memory.dmp

Filesize
132KB

Download
memory/1964-22-0x000007FEF7830000-0x000007FEF7841000-memory.dmp

Filesize
68KB

Download
memory/1964-27-0x000007FEF7230000-0x000007FEF7248000-memory.dmp

Filesize
96KB

Download
memory/1964-28-0x000007FEF5520000-0x000007FEF5550000-memory.dmp

Filesize
192KB

Download
memory/1964-26-0x000007FEF7250000-0x000007FEF7261000-memory.dmp

Filesize
68KB

Download
memory/1964-25-0x000007FEF7270000-0x000007FEF728B000-memory.dmp

Filesize
108KB

Download
memory/1964-29-0x000007FEF54B0000-0x000007FEF5517000-memory.dmp

Filesize
412KB

Download
memory/1964-30-0x000007FEF5430000-0x000007FEF54AC000-memory.dmp

Filesize
496KB

Download
memory/1964-32-0x000007FEF53B0000-0x000007FEF5407000-memory.dmp

Filesize
348KB

Download
memory/1964-19-0x000007FEF5550000-0x000007FEF6600000-memory.dmp

Filesize
16.7MB

Download
memory/1964-31-0x000007FEF5410000-0x000007FEF5421000-memory.dmp

Filesize
68KB

Download
memory/1964-24-0x000007FEF7290000-0x000007FEF72A1000-memory.dmp

Filesize
68KB

Download
memory/1964-23-0x000007FEF7810000-0x000007FEF7821000-memory.dmp

Filesize
68KB

Download
memory/1964-21-0x000007FEF7850000-0x000007FEF7868000-memory.dmp

Filesize
96KB

Download
memory/1964-34-0x000007FEF5210000-0x000007FEF5227000-memory.dmp

Filesize
92KB

Download
memory/1964-33-0x000007FEF5230000-0x000007FEF53B0000-memory.dmp

Filesize
1.5MB

Download
memory/1964-36-0x000007FEF3790000-0x000007FEF3996000-memory.dmp

Filesize
2.0MB

Download
memory/1964-38-0x000007FEF3720000-0x000007FEF3762000-memory.dmp

Filesize
264KB

Download
memory/1964-39-0x000007FEF36D0000-0x000007FEF371D000-memory.dmp

Filesize
308KB

Download
memory/1964-37-0x000007FEF3770000-0x000007FEF3782000-memory.dmp

Filesize
72KB

Download
memory/1964-35-0x000007FEF39A0000-0x000007FEF520F000-memory.dmp

Filesize
24.4MB

Download
memory/1964-41-0x000007FEF3500000-0x000007FEF3557000-memory.dmp

Filesize
348KB

Download
memory/1964-40-0x000007FEF3560000-0x000007FEF36CB000-memory.dmp

Filesize
1.4MB

Download
memory/1964-43-0x000007FEFB7E0000-0x000007FEFB7F0000-memory.dmp

Filesize
64KB

Download
memory/1964-46-0x000007FEF3240000-0x000007FEF3256000-memory.dmp

Filesize
88KB

Download
memory/1964-42-0x000007FEF32B0000-0x000007FEF34F1000-memory.dmp

Filesize
2.3MB

Download
memory/1964-45-0x000007FEF3260000-0x000007FEF3271000-memory.dmp

Filesize
68KB

Download
memory/1964-44-0x000007FEF3280000-0x000007FEF32AF000-memory.dmp

Filesize
188KB

Download
memory/1964-47-0x000007FEF3170000-0x000007FEF3235000-memory.dmp

Filesize
788KB

Download
memory/1964-48-0x000007FEF3120000-0x000007FEF3162000-memory.dmp

Filesize
264KB

Download
memory/1964-49-0x000007FEF30B0000-0x000007FEF3112000-memory.dmp

Filesize
392KB

Download
memory/1964-53-0x000007FEF2C50000-0x000007FEF2C63000-memory.dmp

Filesize
76KB

Download
memory/1964-54-0x000007FEF2C30000-0x000007FEF2C41000-memory.dmp

Filesize
68KB

Download
memory/1964-52-0x000007FEF2C70000-0x000007FEF2C93000-memory.dmp

Filesize
140KB

Download
memory/1964-55-0x000007FEF2B20000-0x000007FEF2C26000-memory.dmp

Filesize
1.0MB

Download
memory/1964-56-0x000007FEF2B00000-0x000007FEF2B12000-memory.dmp

Filesize
72KB

Download
memory/1964-50-0x000007FEF3040000-0x000007FEF30AD000-memory.dmp

Filesize
436KB

Download
memory/1964-51-0x000007FEF2CA0000-0x000007FEF2CB5000-memory.dmp

Filesize
84KB

Download
memory/1964-57-0x000007FEF2980000-0x000007FEF2AFA000-memory.dmp

Filesize
1.5MB

Download
memory/1964-60-0x000007FEF26A0000-0x000007FEF26E7000-memory.dmp

Filesize
284KB

Download
memory/1964-59-0x000007FEF26F0000-0x000007FEF2751000-memory.dmp

Filesize
388KB

Download
memory/1964-58-0x000007FEF2760000-0x000007FEF2771000-memory.dmp

Filesize
68KB

Download
memory/1964-61-0x000007FEF2620000-0x000007FEF2694000-memory.dmp

Filesize
464KB

Download
memory/1964-62-0x000007FEF24B0000-0x000007FEF24C1000-memory.dmp

Filesize
68KB

Download
memory/1964-65-0x000007FEEFF80000-0x000007FEEFFB4000-memory.dmp

Filesize
208KB

Download
memory/1964-64-0x000007FEEFFC0000-0x000007FEF0017000-memory.dmp

Filesize
348KB

Download
memory/1964-63-0x000007FEF0020000-0x000007FEF006E000-memory.dmp

Filesize
312KB

Download
memory/1964-78-0x000007FEF6810000-0x000007FEF6AC6000-memory.dmp

Filesize
2.7MB

Download
memory/1964-77-0x000007FEFB500000-0x000007FEFB534000-memory.dmp

Filesize
208KB

Download
memory/1964-76-0x000000013FD50000-0x000000013FE48000-memory.dmp

Filesize
992KB

Download
memory/1964-79-0x000007FEF5550000-0x000007FEF6600000-memory.dmp

Filesize
16.7MB

Download