Analysis
- max time kernel
140s - max time network
18s - platform
windows7_x64 - resource
win7-20240729-en - resource tags
- submitted
02/09/2024, 10:07
General
- Target Touhou PC98 Collection/GAMES/2608_BD.wav
- Size 5KB
- Sample240902-l5mdwayeqg
- SHA256 083c383103948dc4f05ac2a4e1bd7f12c02924c7fcd81d98e0ae13f2b309ab2f
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 6 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Touhou PC98 Collection\GAMES\2608_BD.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x5141⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2280-5-0x000000013FC00000-0x000000013FCF8000-memory.dmp
memory/2280-6-0x000007FEFB5A0000-0x000007FEFB5D4000-memory.dmp
memory/2280-9-0x000007FEFB4D0000-0x000007FEFB4E7000-memory.dmp
memory/2280-7-0x000007FEF7C90000-0x000007FEF7F46000-memory.dmp
memory/2280-13-0x000007FEFB280000-0x000007FEFB29D000-memory.dmp
memory/2280-12-0x000007FEFB2A0000-0x000007FEFB2B1000-memory.dmp
memory/2280-11-0x000007FEFB2C0000-0x000007FEFB2D7000-memory.dmp
memory/2280-10-0x000007FEFB4B0000-0x000007FEFB4C1000-memory.dmp
memory/2280-8-0x000007FEFC190000-0x000007FEFC1A8000-memory.dmp
memory/2280-14-0x000007FEFB260000-0x000007FEFB271000-memory.dmp
memory/2280-21-0x000007FEFB010000-0x000007FEFB021000-memory.dmp
memory/2280-20-0x000007FEFB030000-0x000007FEFB041000-memory.dmp
memory/2280-19-0x000007FEFB050000-0x000007FEFB068000-memory.dmp
memory/2280-18-0x000007FEFB1E0000-0x000007FEFB201000-memory.dmp
memory/2280-17-0x000007FEFB210000-0x000007FEFB251000-memory.dmp
memory/2280-34-0x000007FEF5C20000-0x000007FEF5C43000-memory.dmp
memory/2280-37-0x000007FEFB7C0000-0x000007FEFB7D0000-memory.dmp
memory/2280-36-0x000007FEF7170000-0x000007FEF7182000-memory.dmp
memory/2280-35-0x000007FEF7C70000-0x000007FEF7C81000-memory.dmp
memory/2280-33-0x000007FEF7FE0000-0x000007FEF7FF8000-memory.dmp
memory/2280-31-0x000007FEF5C80000-0x000007FEF5CA8000-memory.dmp
memory/2280-30-0x000007FEF5CB0000-0x000007FEF5D07000-memory.dmp
memory/2280-29-0x000007FEFA5A0000-0x000007FEFA5B1000-memory.dmp
memory/2280-28-0x000007FEF5D10000-0x000007FEF5D8C000-memory.dmp
memory/2280-27-0x000007FEF7190000-0x000007FEF71F7000-memory.dmp
memory/2280-26-0x000007FEFA5C0000-0x000007FEFA5F0000-memory.dmp
memory/2280-25-0x000007FEFA5F0000-0x000007FEFA608000-memory.dmp
memory/2280-24-0x000007FEFAFB0000-0x000007FEFAFC1000-memory.dmp
memory/2280-23-0x000007FEFAFD0000-0x000007FEFAFEB000-memory.dmp
memory/2280-22-0x000007FEFAFF0000-0x000007FEFB001000-memory.dmp
memory/2280-40-0x000007FEF5640000-0x000007FEF5652000-memory.dmp
memory/2280-39-0x000007FEF5660000-0x000007FEF5671000-memory.dmp
memory/2280-38-0x000007FEF5A00000-0x000007FEF5A2F000-memory.dmp
memory/2280-15-0x000007FEF5FA0000-0x000007FEF7050000-memory.dmp
memory/2280-32-0x000007FEF5C50000-0x000007FEF5C74000-memory.dmp
memory/2280-16-0x000007FEF5D90000-0x000007FEF5F9B000-memory.dmp
memory/2280-44-0x000007FEF5460000-0x000007FEF5471000-memory.dmp
memory/2280-43-0x000007FEF5480000-0x000007FEF5494000-memory.dmp
memory/2280-45-0x000007FEF5440000-0x000007FEF5451000-memory.dmp
memory/2280-46-0x000007FEF5420000-0x000007FEF5431000-memory.dmp
memory/2280-41-0x000007FEF54C0000-0x000007FEF563A000-memory.dmp
memory/2280-47-0x000007FEF5400000-0x000007FEF5416000-memory.dmp
memory/2280-42-0x000007FEF54A0000-0x000007FEF54B3000-memory.dmp