Resubmissions

10-08-2024 15:21

240810-srb5bayhqh 6

10-08-2024 15:16

240810-snljksvemn 6

10-08-2024 15:12

240810-slh1nsvdpj 6

Analysis

  • max time kernel
    140s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10-08-2024 15:21

General

  • Target

    Helldivers 2 Main Theme - _A Cup Of Liber-Tea_.mp3

  • Size

    8.3MB

  • MD5

    2f6f56e371da28c646dc1b3108680fc6

  • SHA1

    225e019f54fe8ad1b4f544e67bc2a4efd0058e65

  • SHA256

    110cc04be2c257d3b64b427bf39c64e1d347b50bc18953d96610a731a5bd98c3

  • SHA512

    e5b0af1e749f82892e66f1b80fb1fcd181b9fb4ba18d6ce527650ce5828e02f4ac55b8ffc4ed1243cb0dc0dc199433f312903d91c93b39db88ca45108dc02e52

  • SSDEEP

    196608:aSY+jtkDyYV58HiqdCdR+kFj4E9HOWy64pZPuyK:aR+jOh58pdy7FsEROWyLOyK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Helldivers 2 Main Theme - _A Cup Of Liber-Tea_.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2220-6-0x000007FEF7210000-0x000007FEF7244000-memory.dmp

    Filesize

    208KB

  • memory/2220-5-0x000000013FEE0000-0x000000013FFD8000-memory.dmp

    Filesize

    992KB

  • memory/2220-13-0x000007FEF7080000-0x000007FEF709D000-memory.dmp

    Filesize

    116KB

  • memory/2220-14-0x000007FEF7060000-0x000007FEF7071000-memory.dmp

    Filesize

    68KB

  • memory/2220-12-0x000007FEF70A0000-0x000007FEF70B1000-memory.dmp

    Filesize

    68KB

  • memory/2220-11-0x000007FEF70C0000-0x000007FEF70D7000-memory.dmp

    Filesize

    92KB

  • memory/2220-10-0x000007FEFA100000-0x000007FEFA111000-memory.dmp

    Filesize

    68KB

  • memory/2220-9-0x000007FEFA150000-0x000007FEFA167000-memory.dmp

    Filesize

    92KB

  • memory/2220-7-0x000007FEF59A0000-0x000007FEF5C56000-memory.dmp

    Filesize

    2.7MB

  • memory/2220-8-0x000007FEFB250000-0x000007FEFB268000-memory.dmp

    Filesize

    96KB

  • memory/2220-16-0x000007FEF46E0000-0x000007FEF48EB000-memory.dmp

    Filesize

    2.0MB

  • memory/2220-33-0x000007FEF5EC0000-0x000007FEF5EEF000-memory.dmp

    Filesize

    188KB

  • memory/2220-40-0x000007FEF26C0000-0x000007FEF26D2000-memory.dmp

    Filesize

    72KB

  • memory/2220-15-0x000007FEF48F0000-0x000007FEF59A0000-memory.dmp

    Filesize

    16.7MB

  • memory/2220-39-0x000007FEF26E0000-0x000007FEF26F1000-memory.dmp

    Filesize

    68KB

  • memory/2220-38-0x000007FEF28C0000-0x000007FEF28E8000-memory.dmp

    Filesize

    160KB

  • memory/2220-37-0x000007FEF28F0000-0x000007FEF2947000-memory.dmp

    Filesize

    348KB

  • memory/2220-41-0x000007FEF23D0000-0x000007FEF254A000-memory.dmp

    Filesize

    1.5MB

  • memory/2220-36-0x000007FEF4570000-0x000007FEF4635000-memory.dmp

    Filesize

    788KB

  • memory/2220-35-0x000007FEF4640000-0x000007FEF4651000-memory.dmp

    Filesize

    68KB

  • memory/2220-34-0x000007FEF4660000-0x000007FEF4673000-memory.dmp

    Filesize

    76KB

  • memory/2220-32-0x000007FEF4680000-0x000007FEF46D7000-memory.dmp

    Filesize

    348KB

  • memory/2220-31-0x000007FEF5EF0000-0x000007FEF5F01000-memory.dmp

    Filesize

    68KB

  • memory/2220-30-0x000007FEF5F50000-0x000007FEF5F68000-memory.dmp

    Filesize

    96KB

  • memory/2220-29-0x000007FEF63E0000-0x000007FEF63F1000-memory.dmp

    Filesize

    68KB

  • memory/2220-28-0x000007FEF6400000-0x000007FEF647C000-memory.dmp

    Filesize

    496KB

  • memory/2220-27-0x000007FEF6480000-0x000007FEF64E7000-memory.dmp

    Filesize

    412KB

  • memory/2220-17-0x000007FEF7010000-0x000007FEF7051000-memory.dmp

    Filesize

    260KB

  • memory/2220-26-0x000007FEF64F0000-0x000007FEF6520000-memory.dmp

    Filesize

    192KB

  • memory/2220-25-0x000007FEF6520000-0x000007FEF6538000-memory.dmp

    Filesize

    96KB

  • memory/2220-24-0x000007FEF6540000-0x000007FEF6551000-memory.dmp

    Filesize

    68KB

  • memory/2220-23-0x000007FEF6560000-0x000007FEF657B000-memory.dmp

    Filesize

    108KB

  • memory/2220-22-0x000007FEF6580000-0x000007FEF6591000-memory.dmp

    Filesize

    68KB

  • memory/2220-21-0x000007FEF6F80000-0x000007FEF6F91000-memory.dmp

    Filesize

    68KB

  • memory/2220-20-0x000007FEF6FA0000-0x000007FEF6FB1000-memory.dmp

    Filesize

    68KB

  • memory/2220-19-0x000007FEF6FC0000-0x000007FEF6FD8000-memory.dmp

    Filesize

    96KB

  • memory/2220-18-0x000007FEF6FE0000-0x000007FEF7001000-memory.dmp

    Filesize

    132KB

  • memory/2220-44-0x000007FEF59A0000-0x000007FEF5C56000-memory.dmp

    Filesize

    2.7MB