Analysis

  • max time kernel
    141s
  • max time network
    21s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    08/08/2024, 18:56

General

  • Target

    Monkey Fakee Skip Sample.mp4

  • Size

    343KB

  • MD5

    b939a5b557219474abb381366e0e70dc

  • SHA1

    cbe8f789e015f291f826a3611a41e0c1fa10976a

  • SHA256

    44741b21ec9d87abd99ba339749e3f9e390a6c37a49645957b72d57292882145

  • SHA512

    10c9394369b7bc8a8ffa008fd58c6650f08dc0a8646519bb412597875165b5cc20fb7b278f5b50d934bb0594138c64b846b450f695b0e895ea58f7a8064f2d80

  • SSDEEP

    3072:0uDXEohS/v0m8m7ciDh83inxpKMgDtz1iu2i4S8P3bUvIoqZG:H4oo/1Ncid83in2M4zEu2i0P3bUp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 28 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Monkey Fakee Skip Sample.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2364
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x5c4
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2364-5-0x000000013F480000-0x000000013F578000-memory.dmp

    Filesize

    992KB

  • memory/2364-6-0x000007FEFAC30000-0x000007FEFAC64000-memory.dmp

    Filesize

    208KB

  • memory/2364-9-0x000007FEFAC10000-0x000007FEFAC27000-memory.dmp

    Filesize

    92KB

  • memory/2364-14-0x000007FEFA970000-0x000007FEFA981000-memory.dmp

    Filesize

    68KB

  • memory/2364-13-0x000007FEFAB60000-0x000007FEFAB7D000-memory.dmp

    Filesize

    116KB

  • memory/2364-12-0x000007FEFAB80000-0x000007FEFAB91000-memory.dmp

    Filesize

    68KB

  • memory/2364-11-0x000007FEFABA0000-0x000007FEFABB7000-memory.dmp

    Filesize

    92KB

  • memory/2364-10-0x000007FEFABC0000-0x000007FEFABD1000-memory.dmp

    Filesize

    68KB

  • memory/2364-7-0x000007FEF6FA0000-0x000007FEF7256000-memory.dmp

    Filesize

    2.7MB

  • memory/2364-8-0x000007FEFAE60000-0x000007FEFAE78000-memory.dmp

    Filesize

    96KB

  • memory/2364-16-0x000007FEF60C0000-0x000007FEF62CB000-memory.dmp

    Filesize

    2.0MB

  • memory/2364-32-0x000007FEF6360000-0x000007FEF6377000-memory.dmp

    Filesize

    92KB

  • memory/2364-31-0x000007FEF4D40000-0x000007FEF4EC0000-memory.dmp

    Filesize

    1.5MB

  • memory/2364-30-0x000007FEF6060000-0x000007FEF60B7000-memory.dmp

    Filesize

    348KB

  • memory/2364-29-0x000007FEF6380000-0x000007FEF6391000-memory.dmp

    Filesize

    68KB

  • memory/2364-28-0x000007FEF63A0000-0x000007FEF641C000-memory.dmp

    Filesize

    496KB

  • memory/2364-27-0x000007FEF6420000-0x000007FEF6487000-memory.dmp

    Filesize

    412KB

  • memory/2364-26-0x000007FEF6490000-0x000007FEF64C0000-memory.dmp

    Filesize

    192KB

  • memory/2364-25-0x000007FEF64C0000-0x000007FEF64D8000-memory.dmp

    Filesize

    96KB

  • memory/2364-24-0x000007FEF64E0000-0x000007FEF64F1000-memory.dmp

    Filesize

    68KB

  • memory/2364-23-0x000007FEF6F80000-0x000007FEF6F9B000-memory.dmp

    Filesize

    108KB

  • memory/2364-22-0x000007FEFA870000-0x000007FEFA881000-memory.dmp

    Filesize

    68KB

  • memory/2364-21-0x000007FEFA890000-0x000007FEFA8A1000-memory.dmp

    Filesize

    68KB

  • memory/2364-20-0x000007FEFA8B0000-0x000007FEFA8C1000-memory.dmp

    Filesize

    68KB

  • memory/2364-19-0x000007FEFA8D0000-0x000007FEFA8E8000-memory.dmp

    Filesize

    96KB

  • memory/2364-18-0x000007FEFA8F0000-0x000007FEFA911000-memory.dmp

    Filesize

    132KB

  • memory/2364-17-0x000007FEFA920000-0x000007FEFA961000-memory.dmp

    Filesize

    260KB

  • memory/2364-15-0x000007FEF4EC0000-0x000007FEF5F70000-memory.dmp

    Filesize

    16.7MB

  • memory/2364-35-0x000007FEF6040000-0x000007FEF6052000-memory.dmp

    Filesize

    72KB

  • memory/2364-39-0x000007FEF30A0000-0x000007FEF30F7000-memory.dmp

    Filesize

    348KB

  • memory/2364-37-0x000007FEF3270000-0x000007FEF32BD000-memory.dmp

    Filesize

    308KB

  • memory/2364-36-0x000007FEF5FF0000-0x000007FEF6032000-memory.dmp

    Filesize

    264KB

  • memory/2364-33-0x000007FEF34D0000-0x000007FEF4D3F000-memory.dmp

    Filesize

    24.4MB

  • memory/2364-34-0x000007FEF32C0000-0x000007FEF34C6000-memory.dmp

    Filesize

    2.0MB

  • memory/2364-40-0x000007FEF2E50000-0x000007FEF3091000-memory.dmp

    Filesize

    2.3MB

  • memory/2364-43-0x000007FEF2E30000-0x000007FEF2E41000-memory.dmp

    Filesize

    68KB

  • memory/2364-42-0x000007FEF5FC0000-0x000007FEF5FEF000-memory.dmp

    Filesize

    188KB

  • memory/2364-41-0x000007FEFAC00000-0x000007FEFAC10000-memory.dmp

    Filesize

    64KB

  • memory/2364-38-0x000007FEF3100000-0x000007FEF326B000-memory.dmp

    Filesize

    1.4MB

  • memory/2364-44-0x000007FEF2E10000-0x000007FEF2E26000-memory.dmp

    Filesize

    88KB

  • memory/2364-45-0x000007FEF2D40000-0x000007FEF2E05000-memory.dmp

    Filesize

    788KB

  • memory/2364-46-0x000007FEF2CF0000-0x000007FEF2D32000-memory.dmp

    Filesize

    264KB

  • memory/2364-47-0x000007FEF2C80000-0x000007FEF2CE2000-memory.dmp

    Filesize

    392KB

  • memory/2364-48-0x000007FEF2C10000-0x000007FEF2C7D000-memory.dmp

    Filesize

    436KB

  • memory/2364-49-0x000007FEF2BF0000-0x000007FEF2C03000-memory.dmp

    Filesize

    76KB

  • memory/2364-50-0x000007FEF2890000-0x000007FEF28A5000-memory.dmp

    Filesize

    84KB

  • memory/2364-51-0x000007FEF2860000-0x000007FEF2883000-memory.dmp

    Filesize

    140KB

  • memory/2364-52-0x000007FEF2540000-0x000007FEF2553000-memory.dmp

    Filesize

    76KB

  • memory/2364-53-0x000007FEF2430000-0x000007FEF2536000-memory.dmp

    Filesize

    1.0MB

  • memory/2364-54-0x000007FEF2400000-0x000007FEF242A000-memory.dmp

    Filesize

    168KB

  • memory/2364-55-0x000007FEF23E0000-0x000007FEF23F3000-memory.dmp

    Filesize

    76KB

  • memory/2364-56-0x000007FEF23C0000-0x000007FEF23DB000-memory.dmp

    Filesize

    108KB

  • memory/2364-57-0x000007FEF23A0000-0x000007FEF23B2000-memory.dmp

    Filesize

    72KB

  • memory/2364-59-0x000007FEF2340000-0x000007FEF2352000-memory.dmp

    Filesize

    72KB

  • memory/2364-58-0x000007FEF2360000-0x000007FEF2371000-memory.dmp

    Filesize

    68KB

  • memory/2364-60-0x000007FEF2030000-0x000007FEF2041000-memory.dmp

    Filesize

    68KB

  • memory/2364-61-0x000007FEF1FC0000-0x000007FEF2021000-memory.dmp

    Filesize

    388KB

  • memory/2364-62-0x000007FEF1F70000-0x000007FEF1FB7000-memory.dmp

    Filesize

    284KB

  • memory/2364-63-0x000007FEF1EF0000-0x000007FEF1F64000-memory.dmp

    Filesize

    464KB

  • memory/2364-64-0x000007FEF1D80000-0x000007FEF1D91000-memory.dmp

    Filesize

    68KB

  • memory/2364-65-0x000007FEF1A40000-0x000007FEF1A8E000-memory.dmp

    Filesize

    312KB

  • memory/2364-66-0x000007FEF19E0000-0x000007FEF1A37000-memory.dmp

    Filesize

    348KB

  • memory/2364-67-0x000007FEF19A0000-0x000007FEF19D4000-memory.dmp

    Filesize

    208KB