Analysis
- max time kernel
140s - max time network
131s - platform
windows7_x64 - resource
win7-20240708-en - resource tags
- submitted
02/09/2024, 10:07
General
- Target Touhou PC98 Collection/GAMES/2608_HH.wav
- Size 4KB
- Sample240902-l5mdwayeqg
- SHA256 6ebb6241bdb0542477feb2c6bb8af6eff5957cf4e3d9c6be46432cb6a4a44264
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Touhou PC98 Collection\GAMES\2608_HH.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1652-6-0x000007FEF74E0000-0x000007FEF7514000-memory.dmp
memory/1652-5-0x000000013FD50000-0x000000013FE48000-memory.dmp
memory/1652-8-0x000007FEFB120000-0x000007FEFB138000-memory.dmp
memory/1652-9-0x000007FEFACC0000-0x000007FEFACD7000-memory.dmp
memory/1652-10-0x000007FEF7390000-0x000007FEF73A1000-memory.dmp
memory/1652-11-0x000007FEF7370000-0x000007FEF7387000-memory.dmp
memory/1652-12-0x000007FEF7350000-0x000007FEF7361000-memory.dmp
memory/1652-13-0x000007FEF7330000-0x000007FEF734D000-memory.dmp
memory/1652-7-0x000007FEF5C70000-0x000007FEF5F26000-memory.dmp
memory/1652-14-0x000007FEF7310000-0x000007FEF7321000-memory.dmp
memory/1652-16-0x000007FEF72C0000-0x000007FEF7301000-memory.dmp
memory/1652-15-0x000007FEF5A60000-0x000007FEF5C6B000-memory.dmp
memory/1652-19-0x000007FEF7270000-0x000007FEF7288000-memory.dmp
memory/1652-23-0x000007FEF6810000-0x000007FEF682B000-memory.dmp
memory/1652-22-0x000007FEF6830000-0x000007FEF6841000-memory.dmp
memory/1652-21-0x000007FEF6850000-0x000007FEF6861000-memory.dmp
memory/1652-25-0x000007FEF67D0000-0x000007FEF67E8000-memory.dmp
memory/1652-27-0x000007FEF6730000-0x000007FEF6797000-memory.dmp
memory/1652-28-0x000007FEF66B0000-0x000007FEF672C000-memory.dmp
memory/1652-30-0x000007FEF4950000-0x000007FEF49A7000-memory.dmp
memory/1652-31-0x000007FEF61B0000-0x000007FEF61D8000-memory.dmp
memory/1652-29-0x000007FEF6250000-0x000007FEF6261000-memory.dmp
memory/1652-32-0x000007FEF4920000-0x000007FEF4944000-memory.dmp
memory/1652-26-0x000007FEF67A0000-0x000007FEF67D0000-memory.dmp
memory/1652-33-0x000007FEF6190000-0x000007FEF61A8000-memory.dmp
memory/1652-24-0x000007FEF67F0000-0x000007FEF6801000-memory.dmp
memory/1652-20-0x000007FEF7250000-0x000007FEF7261000-memory.dmp
memory/1652-40-0x000007FEF45D0000-0x000007FEF45E2000-memory.dmp
memory/1652-39-0x000007FEF45F0000-0x000007FEF4601000-memory.dmp
memory/1652-47-0x000007FEF4390000-0x000007FEF43A6000-memory.dmp
memory/1652-46-0x000007FEF43B0000-0x000007FEF43C1000-memory.dmp
memory/1652-45-0x000007FEF43D0000-0x000007FEF43E1000-memory.dmp
memory/1652-44-0x000007FEF43F0000-0x000007FEF4401000-memory.dmp
memory/1652-43-0x000007FEF4410000-0x000007FEF4424000-memory.dmp
memory/1652-42-0x000007FEF4430000-0x000007FEF4443000-memory.dmp
memory/1652-41-0x000007FEF4450000-0x000007FEF45CA000-memory.dmp
memory/1652-38-0x000007FEF4690000-0x000007FEF46BF000-memory.dmp
memory/1652-37-0x000007FEF7240000-0x000007FEF7250000-memory.dmp
memory/1652-36-0x000007FEF48B0000-0x000007FEF48C2000-memory.dmp
memory/1652-35-0x000007FEF48D0000-0x000007FEF48E1000-memory.dmp
memory/1652-34-0x000007FEF48F0000-0x000007FEF4913000-memory.dmp
memory/1652-18-0x000007FEF7290000-0x000007FEF72B1000-memory.dmp
memory/1652-17-0x000007FEF49B0000-0x000007FEF5A60000-memory.dmp