Analysis
-
max time kernel
6s -
max time network
1s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
10-08-2024 13:39
Static task
static1
Behavioral task
behavioral1
Sample
melobytes (1).mp3
Resource
win7-20240708-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
melobytes (1).mp3
Resource
win10v2004-20240802-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
melobytes (1).mp3
-
Size
726KB
-
MD5
415426a77a5a07dd2d3f62c44052d8d2
-
SHA1
2f07325d37394dc284a8668262997fd1ca04a052
-
SHA256
20821d9d229ba2279b20c7e9ec7519650aa3d718266e612fb89f037329601672
-
SHA512
8540f84a0c6f4abe5dabd5671bb899cecc826edad2fd088726733b3c649f95f4c53d44478516372f98d70aebdad6dc6cfc8915266b2e2d7c66792e5d3193ad93
-
SSDEEP
12288:vVJpxiyjhaR0R/8ulTBXt7uhXmVio9XIf6yVsUG58n6U:JXj0Rk/8ullEZEIf6yrG586U
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 388 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 388 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 388 vlc.exe Token: SeIncBasePriorityPrivilege 388 vlc.exe -
Suspicious use of FindShellTrayWindow 6 IoCs
pid Process 388 vlc.exe 388 vlc.exe 388 vlc.exe 388 vlc.exe 388 vlc.exe 388 vlc.exe -
Suspicious use of SendNotifyMessage 5 IoCs
pid Process 388 vlc.exe 388 vlc.exe 388 vlc.exe 388 vlc.exe 388 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 388 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\melobytes (1).mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:388