Analysis

  • max time kernel
    140s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    21/08/2024, 04:31

General

  • Target

    mus/noelle.ogg

  • Size

    429KB

  • MD5

    1ca9c249943d2ef59c9413edba69b28d

  • SHA1

    790e14268a228c735aa7ea444d97a76cfc8f4238

  • SHA256

    e88229201c37ca4ce9ca0b9efe3b37a755bb767ad59301f8c4f5f811843e774d

  • SHA512

    ac24c37821df95614307adc73b7f550fc5a5380343eb2387732c3ebddd70b903870fc084e2601c126ad429b81c9822ead21e546df23416e331f7ad9443942058

  • SSDEEP

    12288:xklfTJk+quX9NcCedvvfMk1E8dnstz+e9PwAC:Ak+qSNxeNffnsJrDC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\mus\noelle.ogg"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2696

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2696-5-0x000000013F310000-0x000000013F408000-memory.dmp

          Filesize

          992KB

        • memory/2696-6-0x000007FEF7A20000-0x000007FEF7A54000-memory.dmp

          Filesize

          208KB

        • memory/2696-8-0x000007FEFB0A0000-0x000007FEFB0B8000-memory.dmp

          Filesize

          96KB

        • memory/2696-14-0x000007FEF79A0000-0x000007FEF79B1000-memory.dmp

          Filesize

          68KB

        • memory/2696-7-0x000007FEF6200000-0x000007FEF64B6000-memory.dmp

          Filesize

          2.7MB

        • memory/2696-13-0x000007FEF79C0000-0x000007FEF79DD000-memory.dmp

          Filesize

          116KB

        • memory/2696-12-0x000007FEF79E0000-0x000007FEF79F1000-memory.dmp

          Filesize

          68KB

        • memory/2696-11-0x000007FEF7A00000-0x000007FEF7A17000-memory.dmp

          Filesize

          92KB

        • memory/2696-10-0x000007FEF7C80000-0x000007FEF7C91000-memory.dmp

          Filesize

          68KB

        • memory/2696-9-0x000007FEFA8C0000-0x000007FEFA8D7000-memory.dmp

          Filesize

          92KB

        • memory/2696-15-0x000007FEF5FF0000-0x000007FEF61FB000-memory.dmp

          Filesize

          2.0MB

        • memory/2696-18-0x000007FEF6E20000-0x000007FEF6E41000-memory.dmp

          Filesize

          132KB

        • memory/2696-25-0x000007FEF68C0000-0x000007FEF68D8000-memory.dmp

          Filesize

          96KB

        • memory/2696-26-0x000007FEF6890000-0x000007FEF68C0000-memory.dmp

          Filesize

          192KB

        • memory/2696-30-0x000007FEF4DF0000-0x000007FEF4E4C000-memory.dmp

          Filesize

          368KB

        • memory/2696-29-0x000007FEF6870000-0x000007FEF6881000-memory.dmp

          Filesize

          68KB

        • memory/2696-39-0x000007FEF4AD0000-0x000007FEF4AE2000-memory.dmp

          Filesize

          72KB

        • memory/2696-16-0x000007FEF4F40000-0x000007FEF5FF0000-memory.dmp

          Filesize

          16.7MB

        • memory/2696-38-0x000007FEF4AF0000-0x000007FEF4B01000-memory.dmp

          Filesize

          68KB

        • memory/2696-40-0x000007FEF4950000-0x000007FEF4ACA000-memory.dmp

          Filesize

          1.5MB

        • memory/2696-37-0x000007FEF4B50000-0x000007FEF4C15000-memory.dmp

          Filesize

          788KB

        • memory/2696-36-0x000007FEF4C20000-0x000007FEF4C36000-memory.dmp

          Filesize

          88KB

        • memory/2696-35-0x000007FEF6830000-0x000007FEF6841000-memory.dmp

          Filesize

          68KB

        • memory/2696-34-0x000007FEF4C40000-0x000007FEF4C6F000-memory.dmp

          Filesize

          188KB

        • memory/2696-33-0x000007FEFACD0000-0x000007FEFACE0000-memory.dmp

          Filesize

          64KB

        • memory/2696-32-0x000007FEF6850000-0x000007FEF6867000-memory.dmp

          Filesize

          92KB

        • memory/2696-31-0x000007FEF4C70000-0x000007FEF4DF0000-memory.dmp

          Filesize

          1.5MB

        • memory/2696-28-0x000007FEF4E50000-0x000007FEF4ECC000-memory.dmp

          Filesize

          496KB

        • memory/2696-27-0x000007FEF4ED0000-0x000007FEF4F37000-memory.dmp

          Filesize

          412KB

        • memory/2696-24-0x000007FEF68E0000-0x000007FEF68F1000-memory.dmp

          Filesize

          68KB

        • memory/2696-23-0x000007FEF6900000-0x000007FEF691B000-memory.dmp

          Filesize

          108KB

        • memory/2696-22-0x000007FEF6920000-0x000007FEF6931000-memory.dmp

          Filesize

          68KB

        • memory/2696-21-0x000007FEF6990000-0x000007FEF69A1000-memory.dmp

          Filesize

          68KB

        • memory/2696-20-0x000007FEF69B0000-0x000007FEF69C1000-memory.dmp

          Filesize

          68KB

        • memory/2696-19-0x000007FEF69D0000-0x000007FEF69E8000-memory.dmp

          Filesize

          96KB

        • memory/2696-17-0x000007FEF6E50000-0x000007FEF6E91000-memory.dmp

          Filesize

          260KB