Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    09/08/2024, 15:15

General

  • Target

    SaveInsta.App - 3366175132269292912.mp4

  • Size

    4.1MB

  • MD5

    9653becbf35ffd2084496167c673f80d

  • SHA1

    17fbffd6b2d0558701bba539660316fe88b5fe7e

  • SHA256

    f19b6cbbcede45c9fb87e0c7fd5f79e36206275f5ee7c739d300d2b9743c2ac4

  • SHA512

    d45107ecae6800470d7508be9ef592e0cb3115bd1967d8235787f4d592e86c6f4476164b2d61e4cfbd3e87f0a7662f9039d1b4a04f6d5a5ff164b72edb5c9fbc

  • SSDEEP

    98304:YHVfIdvAmyLLixk8U6gmWZbT/nXXProR8DMEBEGFCq90MQZ:SVrmTL3IfkRgM8FCV5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 47 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\SaveInsta.App - 3366175132269292912.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2756-7-0x000000013FEF0000-0x000000013FFE8000-memory.dmp

    Filesize

    992KB

  • memory/2756-8-0x000007FEF8550000-0x000007FEF8584000-memory.dmp

    Filesize

    208KB

  • memory/2756-15-0x000007FEF83A0000-0x000007FEF83BD000-memory.dmp

    Filesize

    116KB

  • memory/2756-16-0x000007FEF8380000-0x000007FEF8391000-memory.dmp

    Filesize

    68KB

  • memory/2756-10-0x000007FEFBB60000-0x000007FEFBB78000-memory.dmp

    Filesize

    96KB

  • memory/2756-14-0x000007FEF83C0000-0x000007FEF83D1000-memory.dmp

    Filesize

    68KB

  • memory/2756-13-0x000007FEF83E0000-0x000007FEF83F7000-memory.dmp

    Filesize

    92KB

  • memory/2756-12-0x000007FEF8400000-0x000007FEF8411000-memory.dmp

    Filesize

    68KB

  • memory/2756-11-0x000007FEFB560000-0x000007FEFB577000-memory.dmp

    Filesize

    92KB

  • memory/2756-9-0x000007FEF68D0000-0x000007FEF6B86000-memory.dmp

    Filesize

    2.7MB

  • memory/2756-29-0x000007FEF7790000-0x000007FEF77F7000-memory.dmp

    Filesize

    412KB

  • memory/2756-33-0x000007FEF5490000-0x000007FEF5610000-memory.dmp

    Filesize

    1.5MB

  • memory/2756-34-0x000007FEF7220000-0x000007FEF7237000-memory.dmp

    Filesize

    92KB

  • memory/2756-32-0x000007FEF6FA0000-0x000007FEF6FF7000-memory.dmp

    Filesize

    348KB

  • memory/2756-17-0x000007FEF5820000-0x000007FEF68D0000-memory.dmp

    Filesize

    16.7MB

  • memory/2756-31-0x000007FEF7240000-0x000007FEF7251000-memory.dmp

    Filesize

    68KB

  • memory/2756-18-0x000007FEF5610000-0x000007FEF581B000-memory.dmp

    Filesize

    2.0MB

  • memory/2756-30-0x000007FEF7710000-0x000007FEF778C000-memory.dmp

    Filesize

    496KB

  • memory/2756-28-0x000007FEF7800000-0x000007FEF7830000-memory.dmp

    Filesize

    192KB

  • memory/2756-27-0x000007FEF7830000-0x000007FEF7848000-memory.dmp

    Filesize

    96KB

  • memory/2756-26-0x000007FEF7850000-0x000007FEF7861000-memory.dmp

    Filesize

    68KB

  • memory/2756-25-0x000007FEF7870000-0x000007FEF788B000-memory.dmp

    Filesize

    108KB

  • memory/2756-24-0x000007FEF7890000-0x000007FEF78A1000-memory.dmp

    Filesize

    68KB

  • memory/2756-23-0x000007FEF78B0000-0x000007FEF78C1000-memory.dmp

    Filesize

    68KB

  • memory/2756-22-0x000007FEF82C0000-0x000007FEF82D1000-memory.dmp

    Filesize

    68KB

  • memory/2756-21-0x000007FEF82E0000-0x000007FEF82F8000-memory.dmp

    Filesize

    96KB

  • memory/2756-20-0x000007FEF8300000-0x000007FEF8321000-memory.dmp

    Filesize

    132KB

  • memory/2756-19-0x000007FEF8330000-0x000007FEF8371000-memory.dmp

    Filesize

    260KB

  • memory/2756-38-0x000007FEF6F30000-0x000007FEF6F72000-memory.dmp

    Filesize

    264KB

  • memory/2756-37-0x000007FEF6F80000-0x000007FEF6F92000-memory.dmp

    Filesize

    72KB

  • memory/2756-36-0x000007FEF3A10000-0x000007FEF3C16000-memory.dmp

    Filesize

    2.0MB

  • memory/2756-39-0x000007FEF39C0000-0x000007FEF3A0D000-memory.dmp

    Filesize

    308KB

  • memory/2756-40-0x000007FEF3710000-0x000007FEF387B000-memory.dmp

    Filesize

    1.4MB

  • memory/2756-41-0x000007FEF3960000-0x000007FEF39B7000-memory.dmp

    Filesize

    348KB

  • memory/2756-46-0x000007FEF3920000-0x000007FEF3936000-memory.dmp

    Filesize

    88KB

  • memory/2756-48-0x000007FEF38D0000-0x000007FEF3912000-memory.dmp

    Filesize

    264KB

  • memory/2756-35-0x000007FEF3C20000-0x000007FEF548F000-memory.dmp

    Filesize

    24.4MB

  • memory/2756-49-0x000007FEF3380000-0x000007FEF33E2000-memory.dmp

    Filesize

    392KB

  • memory/2756-47-0x000007FEF33F0000-0x000007FEF34B5000-memory.dmp

    Filesize

    788KB

  • memory/2756-50-0x000007FEF3310000-0x000007FEF337D000-memory.dmp

    Filesize

    436KB

  • memory/2756-45-0x000007FEF3940000-0x000007FEF3951000-memory.dmp

    Filesize

    68KB

  • memory/2756-54-0x000007FEF2F40000-0x000007FEF2F53000-memory.dmp

    Filesize

    76KB

  • memory/2756-53-0x000007FEF2F80000-0x000007FEF2FA3000-memory.dmp

    Filesize

    140KB

  • memory/2756-57-0x000007FEF2A50000-0x000007FEF2A61000-memory.dmp

    Filesize

    68KB

  • memory/2756-59-0x000007FEF2990000-0x000007FEF29D7000-memory.dmp

    Filesize

    284KB

  • memory/2756-58-0x000007FEF29E0000-0x000007FEF2A41000-memory.dmp

    Filesize

    388KB

  • memory/2756-61-0x000007FEF27A0000-0x000007FEF27B1000-memory.dmp

    Filesize

    68KB

  • memory/2756-62-0x000007FEF08C0000-0x000007FEF090E000-memory.dmp

    Filesize

    312KB

  • memory/2756-64-0x000007FEF0500000-0x000007FEF0534000-memory.dmp

    Filesize

    208KB

  • memory/2756-63-0x000007FEF0860000-0x000007FEF08B7000-memory.dmp

    Filesize

    348KB

  • memory/2756-60-0x000007FEF2910000-0x000007FEF2984000-memory.dmp

    Filesize

    464KB

  • memory/2756-56-0x000007FEF2E10000-0x000007FEF2E21000-memory.dmp

    Filesize

    68KB

  • memory/2756-55-0x000007FEF2E30000-0x000007FEF2F36000-memory.dmp

    Filesize

    1.0MB

  • memory/2756-52-0x000007FEF2FB0000-0x000007FEF2FC5000-memory.dmp

    Filesize

    84KB

  • memory/2756-51-0x000007FEF2FD0000-0x000007FEF3280000-memory.dmp

    Filesize

    2.7MB

  • memory/2756-44-0x000007FEF6F00000-0x000007FEF6F2F000-memory.dmp

    Filesize

    188KB

  • memory/2756-43-0x000007FEF82B0000-0x000007FEF82C0000-memory.dmp

    Filesize

    64KB

  • memory/2756-42-0x000007FEF34C0000-0x000007FEF3701000-memory.dmp

    Filesize

    2.3MB

  • memory/2756-67-0x000007FEF68D0000-0x000007FEF6B86000-memory.dmp

    Filesize

    2.7MB