Analysis

  • max time kernel
    141s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    09-09-2024 03:20

General

  • Target

    BeatEdit v1.2.006/BeatEditForResolve_Files/audiofiles/click.wav

  • Size

    23KB

  • MD5

    65b3b10e29bea8adcbc4af421958bb6d

  • SHA1

    d44a471d1c3e545154e942615b46af01b637015a

  • SHA256

    6d13680c4b3629c22ae2ff83574f214097892804ac73a92d74f102de908482a2

  • SHA512

    62546b641be5611d804732c819610e070691b97f8d9667423e8a076e545d472f95aeb49d53d73681d2127f9ce9567edde9ade1f23584662bd5d403dc354cba5d

  • SSDEEP

    384:brI4NbQ1Xuqrm+Z73GoZIw0xFfIfTwgFLOhD7qufB6e0ECj:brIt1+n+t3G0H6f2Tj1Owe60A

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\BeatEdit v1.2.006\BeatEditForResolve_Files\audiofiles\click.wav"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2740-5-0x000000013FDA0000-0x000000013FE98000-memory.dmp

    Filesize

    992KB

  • memory/2740-6-0x000007FEF7D20000-0x000007FEF7D54000-memory.dmp

    Filesize

    208KB

  • memory/2740-8-0x000007FEFBD40000-0x000007FEFBD58000-memory.dmp

    Filesize

    96KB

  • memory/2740-7-0x000007FEF6540000-0x000007FEF67F6000-memory.dmp

    Filesize

    2.7MB

  • memory/2740-11-0x000007FEF7BB0000-0x000007FEF7BC7000-memory.dmp

    Filesize

    92KB

  • memory/2740-10-0x000007FEF7BD0000-0x000007FEF7BE1000-memory.dmp

    Filesize

    68KB

  • memory/2740-9-0x000007FEFB590000-0x000007FEFB5A7000-memory.dmp

    Filesize

    92KB

  • memory/2740-12-0x000007FEF7B90000-0x000007FEF7BA1000-memory.dmp

    Filesize

    68KB

  • memory/2740-13-0x000007FEF7B70000-0x000007FEF7B8D000-memory.dmp

    Filesize

    116KB

  • memory/2740-14-0x000007FEF7B50000-0x000007FEF7B61000-memory.dmp

    Filesize

    68KB

  • memory/2740-15-0x000007FEF6330000-0x000007FEF653B000-memory.dmp

    Filesize

    2.0MB

  • memory/2740-17-0x000007FEF7B00000-0x000007FEF7B41000-memory.dmp

    Filesize

    260KB

  • memory/2740-18-0x000007FEF7AD0000-0x000007FEF7AF1000-memory.dmp

    Filesize

    132KB

  • memory/2740-19-0x000007FEF7AB0000-0x000007FEF7AC8000-memory.dmp

    Filesize

    96KB

  • memory/2740-20-0x000007FEF7A90000-0x000007FEF7AA1000-memory.dmp

    Filesize

    68KB

  • memory/2740-21-0x000007FEF7570000-0x000007FEF7581000-memory.dmp

    Filesize

    68KB

  • memory/2740-28-0x000007FEF6FA0000-0x000007FEF701C000-memory.dmp

    Filesize

    496KB

  • memory/2740-22-0x000007FEF7120000-0x000007FEF7131000-memory.dmp

    Filesize

    68KB

  • memory/2740-26-0x000007FEF7090000-0x000007FEF70C0000-memory.dmp

    Filesize

    192KB

  • memory/2740-25-0x000007FEF70C0000-0x000007FEF70D8000-memory.dmp

    Filesize

    96KB

  • memory/2740-29-0x000007FEF6F80000-0x000007FEF6F91000-memory.dmp

    Filesize

    68KB

  • memory/2740-27-0x000007FEF7020000-0x000007FEF7087000-memory.dmp

    Filesize

    412KB

  • memory/2740-39-0x000007FEF4EF0000-0x000007FEF4F01000-memory.dmp

    Filesize

    68KB

  • memory/2740-40-0x000007FEF4ED0000-0x000007FEF4EE2000-memory.dmp

    Filesize

    72KB

  • memory/2740-38-0x000007FEF4F90000-0x000007FEF4FBF000-memory.dmp

    Filesize

    188KB

  • memory/2740-37-0x000007FEFB600000-0x000007FEFB610000-memory.dmp

    Filesize

    64KB

  • memory/2740-36-0x000007FEF51B0000-0x000007FEF51C2000-memory.dmp

    Filesize

    72KB

  • memory/2740-35-0x000007FEF51D0000-0x000007FEF51E1000-memory.dmp

    Filesize

    68KB

  • memory/2740-34-0x000007FEF51F0000-0x000007FEF5213000-memory.dmp

    Filesize

    140KB

  • memory/2740-32-0x000007FEF5220000-0x000007FEF5244000-memory.dmp

    Filesize

    144KB

  • memory/2740-31-0x000007FEF5250000-0x000007FEF5278000-memory.dmp

    Filesize

    160KB

  • memory/2740-30-0x000007FEF6AA0000-0x000007FEF6AF7000-memory.dmp

    Filesize

    348KB

  • memory/2740-16-0x000007FEF5280000-0x000007FEF6330000-memory.dmp

    Filesize

    16.7MB

  • memory/2740-33-0x000007FEF6A80000-0x000007FEF6A98000-memory.dmp

    Filesize

    96KB

  • memory/2740-24-0x000007FEF70E0000-0x000007FEF70F1000-memory.dmp

    Filesize

    68KB

  • memory/2740-23-0x000007FEF7100000-0x000007FEF711B000-memory.dmp

    Filesize

    108KB

  • memory/2740-41-0x000007FEF4D50000-0x000007FEF4ECA000-memory.dmp

    Filesize

    1.5MB

  • memory/2740-42-0x000007FEF4D30000-0x000007FEF4D43000-memory.dmp

    Filesize

    76KB

  • memory/2740-43-0x000007FEF4D10000-0x000007FEF4D24000-memory.dmp

    Filesize

    80KB

  • memory/2740-44-0x000007FEF4CF0000-0x000007FEF4D01000-memory.dmp

    Filesize

    68KB

  • memory/2740-45-0x000007FEF4CD0000-0x000007FEF4CE1000-memory.dmp

    Filesize

    68KB

  • memory/2740-46-0x000007FEF4CB0000-0x000007FEF4CC1000-memory.dmp

    Filesize

    68KB

  • memory/2740-47-0x000007FEF4C90000-0x000007FEF4CA6000-memory.dmp

    Filesize

    88KB