Analysis
- max time kernel
140s - max time network
119s - platform
windows7_x64 - resource
win7-20240708-en - resource tags
- submitted
02/09/2024, 10:07
General
- Target Touhou PC98 Collection/GAMES/2608_RIM.wav
- Size 4KB
- Sample240902-l5mdwayeqg
- SHA256 a888509403eea148155662ac3714509b62b408a0609e94835b2e2f2761f3b678
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Touhou PC98 Collection\GAMES\2608_RIM.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1908-6-0x000007FEF7D20000-0x000007FEF7D54000-memory.dmp
memory/1908-5-0x000000013F2E0000-0x000000013F3D8000-memory.dmp
memory/1908-8-0x000007FEFBD40000-0x000007FEFBD58000-memory.dmp
memory/1908-14-0x000007FEF7B50000-0x000007FEF7B61000-memory.dmp
memory/1908-13-0x000007FEF7B70000-0x000007FEF7B8D000-memory.dmp
memory/1908-12-0x000007FEF7B90000-0x000007FEF7BA1000-memory.dmp
memory/1908-11-0x000007FEF7BB0000-0x000007FEF7BC7000-memory.dmp
memory/1908-10-0x000007FEF7BD0000-0x000007FEF7BE1000-memory.dmp
memory/1908-9-0x000007FEFB590000-0x000007FEFB5A7000-memory.dmp
memory/1908-7-0x000007FEF6540000-0x000007FEF67F6000-memory.dmp
memory/1908-40-0x000007FEF4ED0000-0x000007FEF4EE2000-memory.dmp
memory/1908-15-0x000007FEF5490000-0x000007FEF6540000-memory.dmp
memory/1908-39-0x000007FEF4F10000-0x000007FEF4F21000-memory.dmp
memory/1908-38-0x000007FEF4F90000-0x000007FEF4FBF000-memory.dmp
memory/1908-37-0x000007FEFB600000-0x000007FEFB610000-memory.dmp
memory/1908-36-0x000007FEF51B0000-0x000007FEF51C2000-memory.dmp
memory/1908-35-0x000007FEF51D0000-0x000007FEF51E1000-memory.dmp
memory/1908-34-0x000007FEF51F0000-0x000007FEF5213000-memory.dmp
memory/1908-33-0x000007FEF6A80000-0x000007FEF6A98000-memory.dmp
memory/1908-32-0x000007FEF5220000-0x000007FEF5244000-memory.dmp
memory/1908-31-0x000007FEF5250000-0x000007FEF5278000-memory.dmp
memory/1908-30-0x000007FEF6AA0000-0x000007FEF6AF7000-memory.dmp
memory/1908-29-0x000007FEF6F80000-0x000007FEF6F91000-memory.dmp
memory/1908-28-0x000007FEF6FA0000-0x000007FEF701C000-memory.dmp
memory/1908-27-0x000007FEF7020000-0x000007FEF7087000-memory.dmp
memory/1908-26-0x000007FEF7090000-0x000007FEF70C0000-memory.dmp
memory/1908-25-0x000007FEF70C0000-0x000007FEF70D8000-memory.dmp
memory/1908-24-0x000007FEF70E0000-0x000007FEF70F1000-memory.dmp
memory/1908-23-0x000007FEF7100000-0x000007FEF711B000-memory.dmp
memory/1908-22-0x000007FEF7120000-0x000007FEF7131000-memory.dmp
memory/1908-21-0x000007FEF7570000-0x000007FEF7581000-memory.dmp
memory/1908-20-0x000007FEF7A90000-0x000007FEF7AA1000-memory.dmp
memory/1908-19-0x000007FEF7AB0000-0x000007FEF7AC8000-memory.dmp
memory/1908-18-0x000007FEF7AD0000-0x000007FEF7AF1000-memory.dmp
memory/1908-17-0x000007FEF7B00000-0x000007FEF7B41000-memory.dmp
memory/1908-16-0x000007FEF5280000-0x000007FEF548B000-memory.dmp
memory/1908-46-0x000007FEF4CB0000-0x000007FEF4CC1000-memory.dmp
memory/1908-45-0x000007FEF4CD0000-0x000007FEF4CE1000-memory.dmp
memory/1908-44-0x000007FEF4CF0000-0x000007FEF4D01000-memory.dmp
memory/1908-47-0x000007FEF4C90000-0x000007FEF4CA6000-memory.dmp
memory/1908-43-0x000007FEF4D10000-0x000007FEF4D24000-memory.dmp
memory/1908-42-0x000007FEF4D30000-0x000007FEF4D43000-memory.dmp
memory/1908-41-0x000007FEF4D50000-0x000007FEF4ECA000-memory.dmp