Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    21/08/2024, 04:31

General

  • Target

    mus/quiet_autumn.ogg

  • Size

    693KB

  • MD5

    fb9c60c59c39d3746b08e912818162b1

  • SHA1

    6563f7c6e12d4cdafa2bbb28ba5a5d425145c07e

  • SHA256

    8f5a6526d5b72342ed04de6fe7b68d0067312803d7801024b56876eb4c13a9a8

  • SHA512

    35780f1d52f7f2ecba34d3aff15cd4d5b80a6649bb76c6fd8226d5d3a579dacc251ec9a2a7f1ddd0ac17e02a781dc38ecda0636004006f58229eae8f0e9eb0e6

  • SSDEEP

    12288:nnTQM+MMDVuYnQXADZkHElH+lXvpyBjjS5K6V5bBxBijvHBV:nTQEMZuObWmOhGjO5lROHD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\mus\quiet_autumn.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2888

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2888-5-0x000000013F540000-0x000000013F638000-memory.dmp

          Filesize

          992KB

        • memory/2888-6-0x000007FEFADE0000-0x000007FEFAE14000-memory.dmp

          Filesize

          208KB

        • memory/2888-13-0x000007FEF7000000-0x000007FEF701D000-memory.dmp

          Filesize

          116KB

        • memory/2888-14-0x000007FEF6FE0000-0x000007FEF6FF1000-memory.dmp

          Filesize

          68KB

        • memory/2888-12-0x000007FEF7020000-0x000007FEF7031000-memory.dmp

          Filesize

          68KB

        • memory/2888-7-0x000007FEF8000000-0x000007FEF82B6000-memory.dmp

          Filesize

          2.7MB

        • memory/2888-11-0x000007FEF7040000-0x000007FEF7057000-memory.dmp

          Filesize

          92KB

        • memory/2888-10-0x000007FEF7AA0000-0x000007FEF7AB1000-memory.dmp

          Filesize

          68KB

        • memory/2888-9-0x000007FEF7FE0000-0x000007FEF7FF7000-memory.dmp

          Filesize

          92KB

        • memory/2888-8-0x000007FEFC150000-0x000007FEFC168000-memory.dmp

          Filesize

          96KB

        • memory/2888-15-0x000007FEF6980000-0x000007FEF6B8B000-memory.dmp

          Filesize

          2.0MB

        • memory/2888-33-0x000007FEFADC0000-0x000007FEFADD0000-memory.dmp

          Filesize

          64KB

        • memory/2888-32-0x000007FEF54A0000-0x000007FEF54B7000-memory.dmp

          Filesize

          92KB

        • memory/2888-31-0x000007FEF54C0000-0x000007FEF5640000-memory.dmp

          Filesize

          1.5MB

        • memory/2888-30-0x000007FEF5640000-0x000007FEF569C000-memory.dmp

          Filesize

          368KB

        • memory/2888-29-0x000007FEF56A0000-0x000007FEF56B1000-memory.dmp

          Filesize

          68KB

        • memory/2888-28-0x000007FEF56C0000-0x000007FEF573C000-memory.dmp

          Filesize

          496KB

        • memory/2888-27-0x000007FEF5740000-0x000007FEF57A7000-memory.dmp

          Filesize

          412KB

        • memory/2888-26-0x000007FEF57B0000-0x000007FEF57E0000-memory.dmp

          Filesize

          192KB

        • memory/2888-25-0x000007FEF57E0000-0x000007FEF57F8000-memory.dmp

          Filesize

          96KB

        • memory/2888-24-0x000007FEF5800000-0x000007FEF5811000-memory.dmp

          Filesize

          68KB

        • memory/2888-23-0x000007FEF5820000-0x000007FEF583B000-memory.dmp

          Filesize

          108KB

        • memory/2888-22-0x000007FEF5840000-0x000007FEF5851000-memory.dmp

          Filesize

          68KB

        • memory/2888-21-0x000007FEF5860000-0x000007FEF5871000-memory.dmp

          Filesize

          68KB

        • memory/2888-20-0x000007FEF5880000-0x000007FEF5891000-memory.dmp

          Filesize

          68KB

        • memory/2888-19-0x000007FEF6BD0000-0x000007FEF6BE8000-memory.dmp

          Filesize

          96KB

        • memory/2888-18-0x000007FEF58A0000-0x000007FEF58C1000-memory.dmp

          Filesize

          132KB

        • memory/2888-17-0x000007FEF6BF0000-0x000007FEF6C31000-memory.dmp

          Filesize

          260KB

        • memory/2888-34-0x000007FEF5470000-0x000007FEF549F000-memory.dmp

          Filesize

          188KB

        • memory/2888-35-0x000007FEF5450000-0x000007FEF5461000-memory.dmp

          Filesize

          68KB

        • memory/2888-36-0x000007FEF5430000-0x000007FEF5446000-memory.dmp

          Filesize

          88KB

        • memory/2888-37-0x000007FEF5360000-0x000007FEF5425000-memory.dmp

          Filesize

          788KB

        • memory/2888-38-0x000007FEF5300000-0x000007FEF5311000-memory.dmp

          Filesize

          68KB

        • memory/2888-39-0x000007FEF52E0000-0x000007FEF52F2000-memory.dmp

          Filesize

          72KB

        • memory/2888-16-0x000007FEF58D0000-0x000007FEF6980000-memory.dmp

          Filesize

          16.7MB

        • memory/2888-40-0x000007FEF5160000-0x000007FEF52DA000-memory.dmp

          Filesize

          1.5MB