Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
09/08/2024, 15:15
Static task
static1
Behavioral task
behavioral1
Sample
SaveInsta.App - 3366175132269292912.mp4
Resource
win7-20240705-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
SaveInsta.App - 3366175132269292912.mp4
Resource
win10v2004-20240802-en
7 signatures
150 seconds
General
-
Target
SaveInsta.App - 3366175132269292912.mp4
-
Size
4.1MB
-
MD5
9653becbf35ffd2084496167c673f80d
-
SHA1
17fbffd6b2d0558701bba539660316fe88b5fe7e
-
SHA256
f19b6cbbcede45c9fb87e0c7fd5f79e36206275f5ee7c739d300d2b9743c2ac4
-
SHA512
d45107ecae6800470d7508be9ef592e0cb3115bd1967d8235787f4d592e86c6f4476164b2d61e4cfbd3e87f0a7662f9039d1b4a04f6d5a5ff164b72edb5c9fbc
-
SSDEEP
98304:YHVfIdvAmyLLixk8U6gmWZbT/nXXProR8DMEBEGFCq90MQZ:SVrmTL3IfkRgM8FCV5
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2756 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2756 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2756 vlc.exe Token: SeIncBasePriorityPrivilege 2756 vlc.exe -
Suspicious use of FindShellTrayWindow 47 IoCs
pid Process 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe 2756 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2756 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\SaveInsta.App - 3366175132269292912.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2756