9fd9d57e86fe0804c66c0e9d8ff88025628d6756780f389907d68d91a7d354e0

Resubmissions

07/09/2024, 05:10

240907-ft7yjswfjl 6

07/09/2024, 05:07

240907-fse65swgla 6

Analysis

max time kernel
140s
max time network
119s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
07/09/2024, 05:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

outro-song-xenogenesis.mp3
Size

265KB
MD5

f8a6c25e29bd77d386bdb6f298aadf21
SHA1

4623b4a7a973115b4d59cc9462ebe8385e510a6f
SHA256

9fd9d57e86fe0804c66c0e9d8ff88025628d6756780f389907d68d91a7d354e0
SHA512

7ed248696cea38edba172ae2ce5bd0d8a655d11bf2b75baa9c3269ebf045db02b5080e313d3b5eec746982e58b1c309b4c27d4d468090e040fbca4a1c02e52ce
SSDEEP

6144:inke+48U9H9Q4+pKUVTZAOxm9sJ+Aoda9M0/yCA6clvcSoeO:ike+hUrcpTTZAqLWb56clvm

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
784	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
784	vlc.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	784	vlc.exe
Token: SeIncBasePriorityPrivilege	784	vlc.exe

Suspicious use of FindShellTrayWindow 9 IoCs

pid	Process
784	vlc.exe
784	vlc.exe
784	vlc.exe
784	vlc.exe
784	vlc.exe
784	vlc.exe
784	vlc.exe
784	vlc.exe
784	vlc.exe

Suspicious use of SendNotifyMessage 8 IoCs

pid	Process
784	vlc.exe
784	vlc.exe
784	vlc.exe
784	vlc.exe
784	vlc.exe
784	vlc.exe
784	vlc.exe
784	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
784	vlc.exe

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\outro-song-xenogenesis.mp3"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/784-6-0x000007FEF64E0000-0x000007FEF6514000-memory.dmp

Filesize
208KB

Download
memory/784-5-0x000000013FD80000-0x000000013FE78000-memory.dmp

Filesize
992KB

Download
memory/784-8-0x000007FEFAEA0000-0x000007FEFAEB8000-memory.dmp

Filesize
96KB

Download
memory/784-14-0x000007FEF5F20000-0x000007FEF5F31000-memory.dmp

Filesize
68KB

Download
memory/784-7-0x000007FEF57E0000-0x000007FEF5A96000-memory.dmp

Filesize
2.7MB

Download
memory/784-13-0x000007FEF5F40000-0x000007FEF5F5D000-memory.dmp

Filesize
116KB

Download
memory/784-12-0x000007FEF5F60000-0x000007FEF5F71000-memory.dmp

Filesize
68KB

Download
memory/784-11-0x000007FEF6390000-0x000007FEF63A7000-memory.dmp

Filesize
92KB

Download
memory/784-10-0x000007FEF65B0000-0x000007FEF65C1000-memory.dmp

Filesize
68KB

Download
memory/784-9-0x000007FEF7280000-0x000007FEF7297000-memory.dmp

Filesize
92KB

Download
memory/784-16-0x000007FEF5D50000-0x000007FEF5D91000-memory.dmp

Filesize
260KB

Download
memory/784-15-0x000007FEF55D0000-0x000007FEF57DB000-memory.dmp

Filesize
2.0MB

Download
memory/784-19-0x000007FEF5D30000-0x000007FEF5D48000-memory.dmp

Filesize
96KB

Download
memory/784-23-0x000007FEF5C10000-0x000007FEF5C2B000-memory.dmp

Filesize
108KB

Download
memory/784-25-0x000007FEF5BD0000-0x000007FEF5BE8000-memory.dmp

Filesize
96KB

Download
memory/784-28-0x000007FEF4400000-0x000007FEF447C000-memory.dmp

Filesize
496KB

Download
memory/784-36-0x000007FEF4220000-0x000007FEF42E5000-memory.dmp

Filesize
788KB

Download
memory/784-41-0x000007FEF21F0000-0x000007FEF236A000-memory.dmp

Filesize
1.5MB

Download
memory/784-40-0x000007FEF2370000-0x000007FEF2382000-memory.dmp

Filesize
72KB

Download
memory/784-17-0x000007FEF4520000-0x000007FEF55D0000-memory.dmp

Filesize
16.7MB

Download
memory/784-39-0x000007FEF2390000-0x000007FEF23A1000-memory.dmp

Filesize
68KB

Download
memory/784-38-0x000007FEF2570000-0x000007FEF2598000-memory.dmp

Filesize
160KB

Download
memory/784-37-0x000007FEF25A0000-0x000007FEF25F7000-memory.dmp

Filesize
348KB

Download
memory/784-35-0x000007FEF42F0000-0x000007FEF4301000-memory.dmp

Filesize
68KB

Download
memory/784-34-0x000007FEF4310000-0x000007FEF4323000-memory.dmp

Filesize
76KB

Download
memory/784-33-0x000007FEF4330000-0x000007FEF435F000-memory.dmp

Filesize
188KB

Download
memory/784-32-0x000007FEF4360000-0x000007FEF43B7000-memory.dmp

Filesize
348KB

Download
memory/784-31-0x000007FEF43C0000-0x000007FEF43D1000-memory.dmp

Filesize
68KB

Download
memory/784-30-0x000007FEF43E0000-0x000007FEF43F8000-memory.dmp

Filesize
96KB

Download
memory/784-29-0x000007FEF5BB0000-0x000007FEF5BC1000-memory.dmp

Filesize
68KB

Download
memory/784-27-0x000007FEF4480000-0x000007FEF44E7000-memory.dmp

Filesize
412KB

Download
memory/784-26-0x000007FEF44F0000-0x000007FEF4520000-memory.dmp

Filesize
192KB

Download
memory/784-24-0x000007FEF5BF0000-0x000007FEF5C01000-memory.dmp

Filesize
68KB

Download
memory/784-22-0x000007FEF5C30000-0x000007FEF5C41000-memory.dmp

Filesize
68KB

Download
memory/784-21-0x000007FEF5C50000-0x000007FEF5C61000-memory.dmp

Filesize
68KB

Download
memory/784-20-0x000007FEF5C70000-0x000007FEF5C81000-memory.dmp

Filesize
68KB

Download
memory/784-18-0x000007FEF5C90000-0x000007FEF5CB1000-memory.dmp

Filesize
132KB

Download
memory/784-44-0x000007FEF57E0000-0x000007FEF5A96000-memory.dmp

Filesize
2.7MB

Download