Analysis

  • max time kernel
    141s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    21/08/2024, 04:31

General

  • Target

    mus/napsta_alarm.ogg

  • Size

    137KB

  • MD5

    be2682e04f849f6906e8205121753562

  • SHA1

    03a89ecd5125d023253281c5444e52e0fbd7afae

  • SHA256

    8704f23e4c61e7738108e821dbe1756eb3160337b261a068baf2cd292ce4da7c

  • SHA512

    e4a0db0e3928f476f0ad76cf16e6cc828d77f14cdad291a7e1bd5b5a98be7034df56ed14703b926a4a8ecbe4ca1ffb37d8056aaa7980ac40b90fa82abeda57de

  • SSDEEP

    3072:drsDYA8sp5ojJatGDHxHcspIak5v9dpgNWR+wFkNnEtY1Xm:JTYpejQtG7Vbpu5vuAy6Ys

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\mus\napsta_alarm.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2688-6-0x000007FEF7920000-0x000007FEF7954000-memory.dmp

    Filesize

    208KB

  • memory/2688-5-0x000000013FF90000-0x0000000140088000-memory.dmp

    Filesize

    992KB

  • memory/2688-8-0x000007FEFBBC0000-0x000007FEFBBD8000-memory.dmp

    Filesize

    96KB

  • memory/2688-14-0x000007FEF65E0000-0x000007FEF65F1000-memory.dmp

    Filesize

    68KB

  • memory/2688-13-0x000007FEF6690000-0x000007FEF66AD000-memory.dmp

    Filesize

    116KB

  • memory/2688-7-0x000007FEF7660000-0x000007FEF7916000-memory.dmp

    Filesize

    2.7MB

  • memory/2688-12-0x000007FEF6AE0000-0x000007FEF6AF1000-memory.dmp

    Filesize

    68KB

  • memory/2688-11-0x000007FEF6B00000-0x000007FEF6B17000-memory.dmp

    Filesize

    92KB

  • memory/2688-10-0x000007FEF6B20000-0x000007FEF6B31000-memory.dmp

    Filesize

    68KB

  • memory/2688-9-0x000007FEF6B40000-0x000007FEF6B57000-memory.dmp

    Filesize

    92KB

  • memory/2688-15-0x000007FEF5D20000-0x000007FEF5F2B000-memory.dmp

    Filesize

    2.0MB

  • memory/2688-18-0x000007FEF6340000-0x000007FEF6358000-memory.dmp

    Filesize

    96KB

  • memory/2688-17-0x000007FEF65B0000-0x000007FEF65D1000-memory.dmp

    Filesize

    132KB

  • memory/2688-16-0x000007FEF6360000-0x000007FEF63A1000-memory.dmp

    Filesize

    260KB

  • memory/2688-24-0x000007FEF62A0000-0x000007FEF62B1000-memory.dmp

    Filesize

    68KB

  • memory/2688-28-0x000007FEF4B30000-0x000007FEF4BAC000-memory.dmp

    Filesize

    496KB

  • memory/2688-29-0x000007FEF4B10000-0x000007FEF4B21000-memory.dmp

    Filesize

    68KB

  • memory/2688-30-0x000007FEF4AB0000-0x000007FEF4B0C000-memory.dmp

    Filesize

    368KB

  • memory/2688-31-0x000007FEF4930000-0x000007FEF4AB0000-memory.dmp

    Filesize

    1.5MB

  • memory/2688-39-0x000007FEF4750000-0x000007FEF4762000-memory.dmp

    Filesize

    72KB

  • memory/2688-38-0x000007FEF4770000-0x000007FEF4781000-memory.dmp

    Filesize

    68KB

  • memory/2688-40-0x000007FEF45D0000-0x000007FEF474A000-memory.dmp

    Filesize

    1.5MB

  • memory/2688-19-0x000007FEF4C70000-0x000007FEF5D20000-memory.dmp

    Filesize

    16.7MB

  • memory/2688-37-0x000007FEF47D0000-0x000007FEF4895000-memory.dmp

    Filesize

    788KB

  • memory/2688-36-0x000007FEF48A0000-0x000007FEF48B6000-memory.dmp

    Filesize

    88KB

  • memory/2688-35-0x000007FEF48C0000-0x000007FEF48D1000-memory.dmp

    Filesize

    68KB

  • memory/2688-34-0x000007FEF48E0000-0x000007FEF490F000-memory.dmp

    Filesize

    188KB

  • memory/2688-33-0x000007FEFA850000-0x000007FEFA860000-memory.dmp

    Filesize

    64KB

  • memory/2688-32-0x000007FEF4910000-0x000007FEF4927000-memory.dmp

    Filesize

    92KB

  • memory/2688-27-0x000007FEF4BB0000-0x000007FEF4C17000-memory.dmp

    Filesize

    412KB

  • memory/2688-26-0x000007FEF4C20000-0x000007FEF4C50000-memory.dmp

    Filesize

    192KB

  • memory/2688-25-0x000007FEF4C50000-0x000007FEF4C68000-memory.dmp

    Filesize

    96KB

  • memory/2688-23-0x000007FEF62C0000-0x000007FEF62DB000-memory.dmp

    Filesize

    108KB

  • memory/2688-22-0x000007FEF62E0000-0x000007FEF62F1000-memory.dmp

    Filesize

    68KB

  • memory/2688-21-0x000007FEF6300000-0x000007FEF6311000-memory.dmp

    Filesize

    68KB

  • memory/2688-20-0x000007FEF6320000-0x000007FEF6331000-memory.dmp

    Filesize

    68KB