Overview
overview
6Static
static
1945554145-1-16.mp4
windows7-x64
1945554145-1-16.mp4
windows10-2004-x64
6945569409-1-16.mp4
windows7-x64
1945569409-1-16.mp4
windows10-2004-x64
6945793906-1-16.mp4
windows7-x64
1945793906-1-16.mp4
windows10-2004-x64
6945809687-1-16.mp4
windows7-x64
1945809687-1-16.mp4
windows10-2004-x64
6963821516-1-16.mp4
windows7-x64
1963821516-1-16.mp4
windows10-2004-x64
6964296702-1-16.mp4
windows7-x64
1964296702-1-16.mp4
windows10-2004-x64
6Analysis
-
max time kernel
21s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
08-08-2024 14:11
Static task
static1
Behavioral task
behavioral1
Sample
945554145-1-16.mp4
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
945554145-1-16.mp4
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
945569409-1-16.mp4
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
945569409-1-16.mp4
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
945793906-1-16.mp4
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
945793906-1-16.mp4
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
945809687-1-16.mp4
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
945809687-1-16.mp4
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
963821516-1-16.mp4
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
963821516-1-16.mp4
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
964296702-1-16.mp4
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
964296702-1-16.mp4
Resource
win10v2004-20240802-en
General
-
Target
945569409-1-16.mp4
-
Size
3.5MB
-
MD5
bd9dcb34888df2af62c634fe7f9a3f04
-
SHA1
8e2bcbccd639e752f7e9aedfce237641bff7a46d
-
SHA256
cf67ee762cf27f65f114fb5812e9f6adda59ca786c3abb09489b6bb37e1b4816
-
SHA512
e66f9711f62117816a12c17f1dd1af35bfca0b734421bc7293d166dd78bd9548a3090cb3ab8b281a9be697b6f1357482ff0a47fb0cf9a106a6ce508afcb5c1dc
-
SSDEEP
49152:qRRjSYBN5ADpy0OlUzg1PWiQukRxAwnwzXdwi6g25ysqxxKp:ORjSCB5Uzg4ifkRxA5dqg25ysqup
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2088 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2088 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2088 vlc.exe Token: SeIncBasePriorityPrivilege 2088 vlc.exe -
Suspicious use of FindShellTrayWindow 24 IoCs
pid Process 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe -
Suspicious use of SendNotifyMessage 6 IoCs
pid Process 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe 2088 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2088 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\945569409-1-16.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2088