a6560d7ca0aa6cd9fed35b053740140b7f57c89a63b5f965aa2f2be3beab3501

Analysis

max time kernel
140s
max time network
121s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
20/08/2024, 05:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Nighty-Selfbot-main/sounds/error.mp3
Size

18KB
MD5

1e8f77eeaefcc75a118100ec8bdfb250
SHA1

ca8a7d35f87de220320d0c7d29bd500a42b128f4
SHA256

21efd0cc33d0bd16b9ec60795dd6770a125602b50670b7083a0ccf93cd470201
SHA512

717fedf9f05141cd638b045984b857599772be8fe9ebf1d1239bb25f7891b2239e759dda028cc870bb10d0223f4da35e779e05dde904727c4ec2e5dc18266eb6
SSDEEP

384:actkxr79DnSSD4fbPV+tPmuZGYH7/lpzLEAN+Vk0:arr79DSRPAYuZ3Hd+V/

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2488	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2488	vlc.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	2488	vlc.exe
Token: SeIncBasePriorityPrivilege	2488	vlc.exe

Suspicious use of FindShellTrayWindow 9 IoCs

pid	Process
2488	vlc.exe
2488	vlc.exe
2488	vlc.exe
2488	vlc.exe
2488	vlc.exe
2488	vlc.exe
2488	vlc.exe
2488	vlc.exe
2488	vlc.exe

Suspicious use of SendNotifyMessage 8 IoCs

pid	Process
2488	vlc.exe
2488	vlc.exe
2488	vlc.exe
2488	vlc.exe
2488	vlc.exe
2488	vlc.exe
2488	vlc.exe
2488	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2488	vlc.exe

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Nighty-Selfbot-main\sounds\error.mp3"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2488-6-0x000007FEF7DC0000-0x000007FEF7DF4000-memory.dmp

Filesize
208KB

Download
memory/2488-5-0x000000013FE60000-0x000000013FF58000-memory.dmp

Filesize
992KB

Download
memory/2488-8-0x000007FEFC1D0000-0x000007FEFC1E8000-memory.dmp

Filesize
96KB

Download
memory/2488-9-0x000007FEFB240000-0x000007FEFB257000-memory.dmp

Filesize
92KB

Download
memory/2488-10-0x000007FEFB190000-0x000007FEFB1A1000-memory.dmp

Filesize
68KB

Download
memory/2488-11-0x000007FEFAF50000-0x000007FEFAF67000-memory.dmp

Filesize
92KB

Download
memory/2488-12-0x000007FEF7DA0000-0x000007FEF7DB1000-memory.dmp

Filesize
68KB

Download
memory/2488-13-0x000007FEF7D80000-0x000007FEF7D9D000-memory.dmp

Filesize
116KB

Download
memory/2488-14-0x000007FEF7190000-0x000007FEF71A1000-memory.dmp

Filesize
68KB

Download
memory/2488-7-0x000007FEF6790000-0x000007FEF6A46000-memory.dmp

Filesize
2.7MB

Download
memory/2488-15-0x000007FEF6580000-0x000007FEF678B000-memory.dmp

Filesize
2.0MB

Download
memory/2488-25-0x000007FEF6BA0000-0x000007FEF6BB8000-memory.dmp

Filesize
96KB

Download
memory/2488-26-0x000007FEF6B70000-0x000007FEF6BA0000-memory.dmp

Filesize
192KB

Download
memory/2488-24-0x000007FEF6BC0000-0x000007FEF6BD1000-memory.dmp

Filesize
68KB

Download
memory/2488-23-0x000007FEF6BE0000-0x000007FEF6BFB000-memory.dmp

Filesize
108KB

Download
memory/2488-27-0x000007FEF5460000-0x000007FEF54C7000-memory.dmp

Filesize
412KB

Download
memory/2488-31-0x000007FEF5380000-0x000007FEF5391000-memory.dmp

Filesize
68KB

Download
memory/2488-30-0x000007FEF53A0000-0x000007FEF53B8000-memory.dmp

Filesize
96KB

Download
memory/2488-29-0x000007FEF53C0000-0x000007FEF53D1000-memory.dmp

Filesize
68KB

Download
memory/2488-41-0x000007FEF3330000-0x000007FEF3342000-memory.dmp

Filesize
72KB

Download
memory/2488-16-0x000007FEF54D0000-0x000007FEF6580000-memory.dmp

Filesize
16.7MB

Download
memory/2488-42-0x000007FEF31B0000-0x000007FEF332A000-memory.dmp

Filesize
1.5MB

Download
memory/2488-38-0x000007FEF3530000-0x000007FEF3558000-memory.dmp

Filesize
160KB

Download
memory/2488-37-0x000007FEF3560000-0x000007FEF35B7000-memory.dmp

Filesize
348KB

Download
memory/2488-36-0x000007FEF51E0000-0x000007FEF52A5000-memory.dmp

Filesize
788KB

Download
memory/2488-40-0x000007FEF3370000-0x000007FEF3381000-memory.dmp

Filesize
68KB

Download
memory/2488-39-0x000007FEF3390000-0x000007FEF33A5000-memory.dmp

Filesize
84KB

Download
memory/2488-35-0x000007FEF52B0000-0x000007FEF52C1000-memory.dmp

Filesize
68KB

Download
memory/2488-33-0x000007FEF52F0000-0x000007FEF531F000-memory.dmp

Filesize
188KB

Download
memory/2488-34-0x000007FEF52D0000-0x000007FEF52E3000-memory.dmp

Filesize
76KB

Download
memory/2488-32-0x000007FEF5320000-0x000007FEF5377000-memory.dmp

Filesize
348KB

Download
memory/2488-28-0x000007FEF53E0000-0x000007FEF545C000-memory.dmp

Filesize
496KB

Download
memory/2488-22-0x000007FEF6C00000-0x000007FEF6C11000-memory.dmp

Filesize
68KB

Download
memory/2488-20-0x000007FEF70F0000-0x000007FEF7101000-memory.dmp

Filesize
68KB

Download
memory/2488-19-0x000007FEF7120000-0x000007FEF7138000-memory.dmp

Filesize
96KB

Download
memory/2488-21-0x000007FEF6C20000-0x000007FEF6C31000-memory.dmp

Filesize
68KB

Download
memory/2488-18-0x000007FEF6C40000-0x000007FEF6C61000-memory.dmp

Filesize
132KB

Download
memory/2488-17-0x000007FEF7140000-0x000007FEF7181000-memory.dmp

Filesize
260KB

Download