Overview
overview
3Static
static
3blitz-hype...ey.zip
windows7-x64
1blitz-hype...ey.zip
windows10-2004-x64
1Blitz Hype...en.log
windows7-x64
1Blitz Hype...en.log
windows10-2004-x64
1Blitz Hype...se.txt
windows7-x64
1Blitz Hype...se.txt
windows10-2004-x64
1Blitz Hype...se.txt
windows7-x64
1Blitz Hype...se.txt
windows10-2004-x64
1Blitz Hype...my.def
windows7-x64
3Blitz Hype...my.def
windows10-2004-x64
3Blitz Hype...de.zss
windows7-x64
3Blitz Hype...de.zss
windows10-2004-x64
3Blitz Hype...my.cns
windows7-x64
3Blitz Hype...my.cns
windows10-2004-x64
3Blitz Hype...de.cns
windows7-x64
3Blitz Hype...de.cns
windows10-2004-x64
3Blitz Hype...ag.cns
windows7-x64
3Blitz Hype...ag.cns
windows10-2004-x64
3Blitz Hype...n1.cns
windows7-x64
3Blitz Hype...n1.cns
windows10-2004-x64
3Blitz Hype...my.air
windows7-x64
3Blitz Hype...my.air
windows10-2004-x64
3Blitz Hype...my.cmd
windows7-x64
1Blitz Hype...my.cmd
windows10-2004-x64
1Blitz Hype...my.sff
windows7-x64
3Blitz Hype...my.sff
windows10-2004-x64
3Blitz Hype...my.snd
windows7-x64
1Blitz Hype...my.snd
windows10-2004-x64
1Blitz Hype...an.cmd
windows7-x64
1Blitz Hype...an.cmd
windows10-2004-x64
1Blitz Hype...er.cmd
windows7-x64
1Blitz Hype...er.cmd
windows10-2004-x64
1Analysis
-
max time kernel
140s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
08/09/2024, 18:38
Static task
static1
Behavioral task
behavioral1
Sample
blitz-hyper-edition-fv-honey.zip
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
blitz-hyper-edition-fv-honey.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Blitz Hyper Edition FV Honey/Ikemen.log
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Blitz Hyper Edition FV Honey/Ikemen.log
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Blitz Hyper Edition FV Honey/License.txt
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Blitz Hyper Edition FV Honey/License.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Blitz Hyper Edition FV Honey/ScreenpackLicense.txt
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
Blitz Hyper Edition FV Honey/ScreenpackLicense.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Blitz Hyper Edition FV Honey/chars/Amy/Amy.def
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Blitz Hyper Edition FV Honey/chars/Amy/Amy.def
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Blitz Hyper Edition FV Honey/chars/Amy/AmyArcade.zss
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
Blitz Hyper Edition FV Honey/chars/Amy/AmyArcade.zss
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Blitz Hyper Edition FV Honey/chars/Amy/CNS/Amy.cns
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Blitz Hyper Edition FV Honey/chars/Amy/CNS/Amy.cns
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Blitz Hyper Edition FV Honey/chars/Amy/CNS/Arcade.cns
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Blitz Hyper Edition FV Honey/chars/Amy/CNS/Arcade.cns
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Blitz Hyper Edition FV Honey/chars/Amy/CNS/Tag.cns
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Blitz Hyper Edition FV Honey/chars/Amy/CNS/Tag.cns
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Blitz Hyper Edition FV Honey/chars/Amy/CNS/common1.cns
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Blitz Hyper Edition FV Honey/chars/Amy/CNS/common1.cns
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Blitz Hyper Edition FV Honey/chars/Amy/Files/Amy.air
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Blitz Hyper Edition FV Honey/chars/Amy/Files/Amy.air
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Blitz Hyper Edition FV Honey/chars/Amy/Files/Amy.cmd
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Blitz Hyper Edition FV Honey/chars/Amy/Files/Amy.cmd
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Blitz Hyper Edition FV Honey/chars/Amy/Files/Amy.sff
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
Blitz Hyper Edition FV Honey/chars/Amy/Files/Amy.sff
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Blitz Hyper Edition FV Honey/chars/Amy/Files/Amy.snd
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Blitz Hyper Edition FV Honey/chars/Amy/Files/Amy.snd
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Blitz Hyper Edition FV Honey/chars/Bean/Files/Bean.cmd
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Blitz Hyper Edition FV Honey/chars/Bean/Files/Bean.cmd
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Blitz Hyper Edition FV Honey/chars/Challenger/Files/Challenger.cmd
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Blitz Hyper Edition FV Honey/chars/Challenger/Files/Challenger.cmd
Resource
win10v2004-20240802-en
General
-
Target
Blitz Hyper Edition FV Honey/chars/Amy/Files/Amy.snd
-
Size
7.5MB
-
MD5
ff3586b11af1b98fa9c7499a5a54c24d
-
SHA1
c7ea9899f982a3271c53cc0bdcecd0074476c8cd
-
SHA256
be79a3dd2ac4f81d1b1a63bf2ef4bc2d6edf7d0f7d8fee88f2830272990a6137
-
SHA512
c245e0a80a33d85bf116a16e1907f0d5bc6e84547cd401602d2bd1b511cbb026535e2e0a38d25497a16e67abfe80168033bf72fbaa0ad5bc7beb46548e802618
-
SSDEEP
196608:xb/TbTbTbT/bbT/T/T/Tb3DDbRBwwZCmHd+wzvLzVTm7wKjT8f:TlbzvVq75jTc
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4412 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4412 vlc.exe -
Suspicious use of FindShellTrayWindow 8 IoCs
pid Process 4412 vlc.exe 4412 vlc.exe 4412 vlc.exe 4412 vlc.exe 4412 vlc.exe 4412 vlc.exe 4412 vlc.exe 4412 vlc.exe -
Suspicious use of SendNotifyMessage 7 IoCs
pid Process 4412 vlc.exe 4412 vlc.exe 4412 vlc.exe 4412 vlc.exe 4412 vlc.exe 4412 vlc.exe 4412 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4412 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Blitz Hyper Edition FV Honey\chars\Amy\Files\Amy.snd"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4412