4b99c56a63521cfd4ac8a7648a92a5737ebc2b009d442e10445a8d44db846d47

Analysis

max time kernel
140s
max time network
120s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
20/08/2024, 16:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

38 34 35/s/t.ogg
Size

1.6MB
MD5

21f2671be6fca53f08aa386f686db1e1
SHA1

c978a965e7b5a1fb1a352646a82e1773ccb09141
SHA256

cb93477e007b818f7e637e9ec024a74b34dd92abe6eb6319cbf4d90613ff0fb5
SHA512

185c4919187e6bb774b4d2df0a9ef89685f37a3653ed00568373d6e4b8408f4e0577b9f1184da35bebe0bffd8a9116840629fa5e49d5aa925f0a1ad368a7bf82
SSDEEP

49152:0ku+t7UZplgWKLcutEpLiiFHVm7A5UQeG0hRTrVxJ:0ku+xUZgWM9tEV947y8GYTrjJ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2012	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2012	vlc.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	2012	vlc.exe
Token: SeIncBasePriorityPrivilege	2012	vlc.exe

Suspicious use of FindShellTrayWindow 9 IoCs

pid	Process
2012	vlc.exe
2012	vlc.exe
2012	vlc.exe
2012	vlc.exe
2012	vlc.exe
2012	vlc.exe
2012	vlc.exe
2012	vlc.exe
2012	vlc.exe

Suspicious use of SendNotifyMessage 8 IoCs

pid	Process
2012	vlc.exe
2012	vlc.exe
2012	vlc.exe
2012	vlc.exe
2012	vlc.exe
2012	vlc.exe
2012	vlc.exe
2012	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2012	vlc.exe

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\38 34 35\s\t.ogg"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2012-6-0x000007FEF73A0000-0x000007FEF73D4000-memory.dmp

Filesize
208KB

Download
memory/2012-5-0x000000013FBD0000-0x000000013FCC8000-memory.dmp

Filesize
992KB

Download
memory/2012-8-0x000007FEFB540000-0x000007FEFB558000-memory.dmp

Filesize
96KB

Download
memory/2012-9-0x000007FEFAAD0000-0x000007FEFAAE7000-memory.dmp

Filesize
92KB

Download
memory/2012-10-0x000007FEFA2F0000-0x000007FEFA301000-memory.dmp

Filesize
68KB

Download
memory/2012-14-0x000007FEF71F0000-0x000007FEF7201000-memory.dmp

Filesize
68KB

Download
memory/2012-13-0x000007FEF7210000-0x000007FEF722D000-memory.dmp

Filesize
116KB

Download
memory/2012-12-0x000007FEF7230000-0x000007FEF7241000-memory.dmp

Filesize
68KB

Download
memory/2012-11-0x000007FEF7250000-0x000007FEF7267000-memory.dmp

Filesize
92KB

Download
memory/2012-7-0x000007FEF5710000-0x000007FEF59C6000-memory.dmp

Filesize
2.7MB

Download
memory/2012-17-0x000007FEF71A0000-0x000007FEF71E1000-memory.dmp

Filesize
260KB

Download
memory/2012-18-0x000007FEF7170000-0x000007FEF7191000-memory.dmp

Filesize
132KB

Download
memory/2012-19-0x000007FEF7150000-0x000007FEF7168000-memory.dmp

Filesize
96KB

Download
memory/2012-20-0x000007FEF7130000-0x000007FEF7141000-memory.dmp

Filesize
68KB

Download
memory/2012-21-0x000007FEF6B80000-0x000007FEF6B91000-memory.dmp

Filesize
68KB

Download
memory/2012-22-0x000007FEF6B60000-0x000007FEF6B71000-memory.dmp

Filesize
68KB

Download
memory/2012-23-0x000007FEF6740000-0x000007FEF675B000-memory.dmp

Filesize
108KB

Download
memory/2012-24-0x000007FEF6720000-0x000007FEF6731000-memory.dmp

Filesize
68KB

Download
memory/2012-25-0x000007FEF6700000-0x000007FEF6718000-memory.dmp

Filesize
96KB

Download
memory/2012-26-0x000007FEF66D0000-0x000007FEF6700000-memory.dmp

Filesize
192KB

Download
memory/2012-30-0x000007FEF5DF0000-0x000007FEF5E4C000-memory.dmp

Filesize
368KB

Download
memory/2012-29-0x000007FEF65C0000-0x000007FEF65D1000-memory.dmp

Filesize
68KB

Download
memory/2012-28-0x000007FEF65E0000-0x000007FEF665C000-memory.dmp

Filesize
496KB

Download
memory/2012-36-0x000007FEF60A0000-0x000007FEF60B6000-memory.dmp

Filesize
88KB

Download
memory/2012-16-0x000007FEF4450000-0x000007FEF465B000-memory.dmp

Filesize
2.0MB

Download
memory/2012-35-0x000007FEF6120000-0x000007FEF6131000-memory.dmp

Filesize
68KB

Download
memory/2012-34-0x000007FEF60C0000-0x000007FEF60EF000-memory.dmp

Filesize
188KB

Download
memory/2012-33-0x000007FEFA500000-0x000007FEFA510000-memory.dmp

Filesize
64KB

Download
memory/2012-32-0x000007FEF65A0000-0x000007FEF65B7000-memory.dmp

Filesize
92KB

Download
memory/2012-31-0x000007FEF42D0000-0x000007FEF4450000-memory.dmp

Filesize
1.5MB

Download
memory/2012-27-0x000007FEF6660000-0x000007FEF66C7000-memory.dmp

Filesize
412KB

Download
memory/2012-40-0x000007FEF4080000-0x000007FEF41FA000-memory.dmp

Filesize
1.5MB

Download
memory/2012-39-0x000007FEF5DB0000-0x000007FEF5DC2000-memory.dmp

Filesize
72KB

Download
memory/2012-38-0x000007FEF5DD0000-0x000007FEF5DE1000-memory.dmp

Filesize
68KB

Download
memory/2012-15-0x000007FEF4660000-0x000007FEF5710000-memory.dmp

Filesize
16.7MB

Download
memory/2012-37-0x000007FEF4200000-0x000007FEF42C5000-memory.dmp

Filesize
788KB

Download
memory/2012-43-0x000007FEF5710000-0x000007FEF59C6000-memory.dmp

Filesize
2.7MB

Download