Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    11-09-2024 18:22

General

  • Target

    Jules/Monaco/package/esm/vs/editor/editor.api.d.ts

  • Size

    252KB

  • MD5

    514de49294c90b52399e017846b759e3

  • SHA1

    59072b89b644cd814b508f3415f8529a80ef8e50

  • SHA256

    712e6f0edb860883f4709eaf540ba688591c47881dc04b210162b62a779ddb54

  • SHA512

    2655a75590f3653492013fd0e4533c8f85a2a4d86fd22df3dd14b285a7304296b72daf3bd3ce1eda3b9b274cde129569c3ddb94ef380353da979453ab3e8c6b4

  • SSDEEP

    6144:nus6TlimttCyT/7oyCSoTM0BDMW0MtDVvZSqD2SzI4Wpv6+gZfPaj/P5bYwg6m85:nF6TliKCyT/7oyCSoTM0BDMW0MtDVvZO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Jules\Monaco\package\esm\vs\editor\editor.api.d.ts"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:3024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3024-6-0x000007FEF6C60000-0x000007FEF6C94000-memory.dmp

    Filesize

    208KB

  • memory/3024-5-0x000000013F7D0000-0x000000013F8C8000-memory.dmp

    Filesize

    992KB

  • memory/3024-8-0x000007FEFB4B0000-0x000007FEFB4C8000-memory.dmp

    Filesize

    96KB

  • memory/3024-9-0x000007FEF7720000-0x000007FEF7737000-memory.dmp

    Filesize

    92KB

  • memory/3024-7-0x000007FEF5FB0000-0x000007FEF6266000-memory.dmp

    Filesize

    2.7MB

  • memory/3024-10-0x000007FEF6D30000-0x000007FEF6D41000-memory.dmp

    Filesize

    68KB

  • memory/3024-11-0x000007FEF6B10000-0x000007FEF6B27000-memory.dmp

    Filesize

    92KB

  • memory/3024-12-0x000007FEF6710000-0x000007FEF6721000-memory.dmp

    Filesize

    68KB

  • memory/3024-13-0x000007FEF66F0000-0x000007FEF670D000-memory.dmp

    Filesize

    116KB

  • memory/3024-14-0x000007FEF6550000-0x000007FEF6561000-memory.dmp

    Filesize

    68KB

  • memory/3024-30-0x000007FEF4B50000-0x000007FEF4BA7000-memory.dmp

    Filesize

    348KB

  • memory/3024-36-0x000007FEF4A60000-0x000007FEF4A72000-memory.dmp

    Filesize

    72KB

  • memory/3024-35-0x000007FEF4A80000-0x000007FEF4A91000-memory.dmp

    Filesize

    68KB

  • memory/3024-34-0x000007FEF4AA0000-0x000007FEF4AC3000-memory.dmp

    Filesize

    140KB

  • memory/3024-33-0x000007FEF4AD0000-0x000007FEF4AE8000-memory.dmp

    Filesize

    96KB

  • memory/3024-32-0x000007FEF4AF0000-0x000007FEF4B14000-memory.dmp

    Filesize

    144KB

  • memory/3024-31-0x000007FEF4B20000-0x000007FEF4B48000-memory.dmp

    Filesize

    160KB

  • memory/3024-29-0x000007FEF4BB0000-0x000007FEF4BC1000-memory.dmp

    Filesize

    68KB

  • memory/3024-28-0x000007FEF4BD0000-0x000007FEF4C4C000-memory.dmp

    Filesize

    496KB

  • memory/3024-27-0x000007FEF4C50000-0x000007FEF4CB7000-memory.dmp

    Filesize

    412KB

  • memory/3024-26-0x000007FEF4CC0000-0x000007FEF4CF0000-memory.dmp

    Filesize

    192KB

  • memory/3024-25-0x000007FEF6380000-0x000007FEF6398000-memory.dmp

    Filesize

    96KB

  • memory/3024-24-0x000007FEF63A0000-0x000007FEF63B1000-memory.dmp

    Filesize

    68KB

  • memory/3024-23-0x000007FEF63C0000-0x000007FEF63DB000-memory.dmp

    Filesize

    108KB

  • memory/3024-22-0x000007FEF63E0000-0x000007FEF63F1000-memory.dmp

    Filesize

    68KB

  • memory/3024-21-0x000007FEF6400000-0x000007FEF6411000-memory.dmp

    Filesize

    68KB

  • memory/3024-20-0x000007FEF6420000-0x000007FEF6431000-memory.dmp

    Filesize

    68KB

  • memory/3024-19-0x000007FEF6440000-0x000007FEF6458000-memory.dmp

    Filesize

    96KB

  • memory/3024-18-0x000007FEF6460000-0x000007FEF6481000-memory.dmp

    Filesize

    132KB

  • memory/3024-17-0x000007FEF6500000-0x000007FEF6541000-memory.dmp

    Filesize

    260KB

  • memory/3024-15-0x000007FEF4F00000-0x000007FEF5FB0000-memory.dmp

    Filesize

    16.7MB

  • memory/3024-16-0x000007FEF4CF0000-0x000007FEF4EFB000-memory.dmp

    Filesize

    2.0MB