Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/09/2024, 13:39

General

  • Target

    NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/Audio/camera.wav

  • Size

    45KB

  • MD5

    4567dbe9cc7cfdfe3a13a609e20a205e

  • SHA1

    2242b43e9e6f45545b479883d72070fbff998340

  • SHA256

    f49ec225a0df03534f4b9b265aeda561fd0a6b11d53038abaa27b3858db41aa1

  • SHA512

    99828e282d4fac836d9bf597ee67305f24e1bbcd273e8e4fb56a08e6a98b34b16e53d8bb0b01e3e496099ad656ac54c1bde5d4145670c2354a4bc313ae67a118

  • SSDEEP

    768:Ff+LOBHmFWHpphqrDAf/ozD6oNCvpsavQRU+pFATYZeuFk/jO/bH:sLOMQHp3iE3yD06aoUEk+Fkbw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\NanoCore 1.2.2.0_Cracked By Alcatraz3222\Resources\Audio\camera.wav"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2112-5-0x000000013F610000-0x000000013F708000-memory.dmp

    Filesize

    992KB

  • memory/2112-6-0x000007FEF7600000-0x000007FEF7634000-memory.dmp

    Filesize

    208KB

  • memory/2112-8-0x000007FEFB810000-0x000007FEFB828000-memory.dmp

    Filesize

    96KB

  • memory/2112-14-0x000007FEF6AB0000-0x000007FEF6AC1000-memory.dmp

    Filesize

    68KB

  • memory/2112-13-0x000007FEF6AD0000-0x000007FEF6AED000-memory.dmp

    Filesize

    116KB

  • memory/2112-12-0x000007FEF7050000-0x000007FEF7061000-memory.dmp

    Filesize

    68KB

  • memory/2112-11-0x000007FEF7090000-0x000007FEF70A7000-memory.dmp

    Filesize

    92KB

  • memory/2112-10-0x000007FEF70B0000-0x000007FEF70C1000-memory.dmp

    Filesize

    68KB

  • memory/2112-9-0x000007FEF78D0000-0x000007FEF78E7000-memory.dmp

    Filesize

    92KB

  • memory/2112-7-0x000007FEF5E00000-0x000007FEF60B6000-memory.dmp

    Filesize

    2.7MB

  • memory/2112-19-0x000007FEF65F0000-0x000007FEF6608000-memory.dmp

    Filesize

    96KB

  • memory/2112-26-0x000007FEF64C0000-0x000007FEF64F0000-memory.dmp

    Filesize

    192KB

  • memory/2112-25-0x000007FEF64F0000-0x000007FEF6508000-memory.dmp

    Filesize

    96KB

  • memory/2112-24-0x000007FEF6510000-0x000007FEF6521000-memory.dmp

    Filesize

    68KB

  • memory/2112-23-0x000007FEF6530000-0x000007FEF654B000-memory.dmp

    Filesize

    108KB

  • memory/2112-22-0x000007FEF6550000-0x000007FEF6561000-memory.dmp

    Filesize

    68KB

  • memory/2112-21-0x000007FEF6570000-0x000007FEF6581000-memory.dmp

    Filesize

    68KB

  • memory/2112-20-0x000007FEF65D0000-0x000007FEF65E1000-memory.dmp

    Filesize

    68KB

  • memory/2112-15-0x000007FEF4D50000-0x000007FEF5E00000-memory.dmp

    Filesize

    16.7MB

  • memory/2112-18-0x000007FEF6610000-0x000007FEF6631000-memory.dmp

    Filesize

    132KB

  • memory/2112-17-0x000007FEF6A60000-0x000007FEF6AA1000-memory.dmp

    Filesize

    260KB

  • memory/2112-16-0x000007FEF4B40000-0x000007FEF4D4B000-memory.dmp

    Filesize

    2.0MB

  • memory/2112-27-0x000007FEF6450000-0x000007FEF64B7000-memory.dmp

    Filesize

    412KB

  • memory/2112-29-0x000007FEF6430000-0x000007FEF6441000-memory.dmp

    Filesize

    68KB

  • memory/2112-28-0x000007FEF4AC0000-0x000007FEF4B3C000-memory.dmp

    Filesize

    496KB

  • memory/2112-30-0x000007FEF4A60000-0x000007FEF4AB7000-memory.dmp

    Filesize

    348KB

  • memory/2112-31-0x000007FEF4A30000-0x000007FEF4A58000-memory.dmp

    Filesize

    160KB

  • memory/2112-32-0x000007FEF4A00000-0x000007FEF4A24000-memory.dmp

    Filesize

    144KB

  • memory/2112-34-0x000007FEF49B0000-0x000007FEF49D3000-memory.dmp

    Filesize

    140KB

  • memory/2112-35-0x000007FEF4990000-0x000007FEF49A1000-memory.dmp

    Filesize

    68KB

  • memory/2112-36-0x000007FEF4970000-0x000007FEF4982000-memory.dmp

    Filesize

    72KB

  • memory/2112-37-0x000007FEF75F0000-0x000007FEF7600000-memory.dmp

    Filesize

    64KB

  • memory/2112-33-0x000007FEF49E0000-0x000007FEF49F8000-memory.dmp

    Filesize

    96KB

  • memory/2112-38-0x000007FEF4750000-0x000007FEF477F000-memory.dmp

    Filesize

    188KB

  • memory/2112-39-0x000007FEF46D0000-0x000007FEF46E1000-memory.dmp

    Filesize

    68KB

  • memory/2112-40-0x000007FEF4690000-0x000007FEF46A2000-memory.dmp

    Filesize

    72KB

  • memory/2112-41-0x000007FEF4510000-0x000007FEF468A000-memory.dmp

    Filesize

    1.5MB

  • memory/2112-42-0x000007FEF44F0000-0x000007FEF4503000-memory.dmp

    Filesize

    76KB

  • memory/2112-43-0x000007FEF44D0000-0x000007FEF44E4000-memory.dmp

    Filesize

    80KB

  • memory/2112-44-0x000007FEF44B0000-0x000007FEF44C1000-memory.dmp

    Filesize

    68KB

  • memory/2112-45-0x000007FEF4490000-0x000007FEF44A1000-memory.dmp

    Filesize

    68KB

  • memory/2112-46-0x000007FEF4470000-0x000007FEF4481000-memory.dmp

    Filesize

    68KB

  • memory/2112-47-0x000007FEF4450000-0x000007FEF4466000-memory.dmp

    Filesize

    88KB