Analysis
-
max time kernel
15s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
23-08-2024 19:20
Static task
static1
Behavioral task
behavioral1
Sample
public.m4v
Resource
win7-20240704-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
public.m4v
Resource
win10v2004-20240802-en
windows10-2004-x64
9 signatures
150 seconds
General
-
Target
public.m4v
-
Size
54.1MB
-
MD5
73d120be42acb242f7af4e2fbce17f1b
-
SHA1
4867b70a24dfbc9f8d4b169b69b8bedb61b2707b
-
SHA256
cb09866e55ddab4bcb26fe3549d40670f70b234f8a8780cd31f70953b0cc5399
-
SHA512
73bbd65edf26880cd7a6e9b9d505acf9b2840d5ccde5db0c7c1e2e0810bdd0ca529be5c265d60037a4fcc788de4f768bf49b95f3965461b647b07a3aead911c5
-
SSDEEP
1572864:BEn3uSwpbjk2Lc9h6rRlfj6UbSRN6N6pYGnTSNxrbc:mn31wvAKlZj6VNc6pYGR
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2448 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2448 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2448 vlc.exe Token: SeIncBasePriorityPrivilege 2448 vlc.exe -
Suspicious use of FindShellTrayWindow 52 IoCs
pid Process 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe -
Suspicious use of SendNotifyMessage 5 IoCs
pid Process 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe 2448 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2448 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\public.m4v"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2448