Overview
overview
10Static
static
3Vedani-Cry...er.zip
windows7-x64
1Vedani-Cry...er.zip
windows10-2004-x64
1Vedani-Cry...ICENSE
windows7-x64
1Vedani-Cry...ICENSE
windows10-2004-x64
1Vedani-Cry...DME.md
windows7-x64
3Vedani-Cry...DME.md
windows10-2004-x64
3Vedani-Cry...al.mp4
windows7-x64
1Vedani-Cry...al.mp4
windows10-2004-x64
6Vedani-Cry...er.exe
windows7-x64
7Vedani-Cry...er.exe
windows10-2004-x64
10test.pyc
windows7-x64
3test.pyc
windows10-2004-x64
3Vedani-Cry...UI.dll
windows7-x64
1Vedani-Cry...UI.dll
windows10-2004-x64
1Vedani-Cry...on.exe
windows7-x64
9Vedani-Cry...on.exe
windows10-2004-x64
10Vedani-Cry...ce.exe
windows7-x64
1Vedani-Cry...ce.exe
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
01/09/2024, 14:03
Behavioral task
behavioral1
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter.zip
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter/LICENSE
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter/LICENSE
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter/README.md
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter/README.md
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter/Vedani-Crypter/Tutorial.mp4
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter/Vedani-Crypter/Tutorial.mp4
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter/Vedani-Crypter/Vedani-Crypter.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter/Vedani-Crypter/Vedani-Crypter.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
test.pyc
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
test.pyc
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter/Vedani-Crypter/XanderUI.dll
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter/Vedani-Crypter/XanderUI.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter/Vedani-Crypter/libs/obsfucation.exe
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter/Vedani-Crypter/libs/obsfucation.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter/Vedani-Crypter/libs/source.exe
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Vedani-Crypter-Lifetime-Activated-vedani-crypter/Vedani-Crypter/libs/source.exe
Resource
win10v2004-20240802-en
General
-
Target
Vedani-Crypter-Lifetime-Activated-vedani-crypter/Vedani-Crypter/Tutorial.mp4
-
Size
9.0MB
-
MD5
16bc44c0f15b318d59b6c7aeab1d4147
-
SHA1
afce70ee4b4a214f1ead730ef639e7589de1e0d0
-
SHA256
a39741d4f3aefa5f1722cedf50c9f6029af26c357b537a6ec5ec4a2ddb728269
-
SHA512
5a3cc76f7cfa7a9f8de2b032cccf6c24d33bcf2a8848dbf17328447819e59f139c043ab442cffb1d9639050ad9d3fa82ff3e8c93403e7ddfbcc2385c83d90d40
-
SSDEEP
196608:HWzTVkH2EpJD9AX5hkxk4konPvW8Q5iOY75DBCbLqEidX+w1tg:uVkHlJD2rkxk4/nPu8uildkL+Ftg
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2136 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2136 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2136 vlc.exe Token: SeIncBasePriorityPrivilege 2136 vlc.exe -
Suspicious use of FindShellTrayWindow 27 IoCs
pid Process 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2136 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Vedani-Crypter-Lifetime-Activated-vedani-crypter\Vedani-Crypter\Tutorial.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2136