Resubmissions

12/09/2024, 20:50

240912-zmmtkstfkj 3

12/09/2024, 20:47

240912-zlcxzsthne 6

Analysis

  • max time kernel
    140s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/09/2024, 20:47

General

  • Target

    angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/cypig_collision_05.wav

  • Size

    59KB

  • MD5

    618c86fcfb62df5206c8074a5ef23a49

  • SHA1

    f3a5923b11bda2420053f4ae21651e45a9bd6c2f

  • SHA256

    c542a57ea1ebcad937566ea446e6f38e81cadcddb13536c2f7a30339bfc39e14

  • SHA512

    998a330c799b1e5c16b5674288c6ff8924101522d7f7ffc4bd6b3b73b1814f1ed59cd4504f1c9bcf0a242436a85e38a6a815646ac54a15e7bc1c25166f5d48d9

  • SSDEEP

    1536:N8tuap3aqTr1GzeEOxjaMxO1DAWpCnj/yH7W93IWB:StuO86EOZaMxgATjb4E

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\angrybirdsmaker0.4.2.1-dist\angrybirdsmaker0.4.2.1-dist\ABM_0.4.2.1_ASDK_.compiled\data_sdk\audio\cypigs\cypig_collision_05.wav"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2084-5-0x000000013FC50000-0x000000013FD48000-memory.dmp

    Filesize

    992KB

  • memory/2084-6-0x000007FEFB090000-0x000007FEFB0C4000-memory.dmp

    Filesize

    208KB

  • memory/2084-8-0x000007FEFB500000-0x000007FEFB518000-memory.dmp

    Filesize

    96KB

  • memory/2084-9-0x000007FEFB040000-0x000007FEFB057000-memory.dmp

    Filesize

    92KB

  • memory/2084-10-0x000007FEFAD80000-0x000007FEFAD91000-memory.dmp

    Filesize

    68KB

  • memory/2084-11-0x000007FEFAB10000-0x000007FEFAB27000-memory.dmp

    Filesize

    92KB

  • memory/2084-12-0x000007FEFAAF0000-0x000007FEFAB01000-memory.dmp

    Filesize

    68KB

  • memory/2084-7-0x000007FEF61D0000-0x000007FEF6486000-memory.dmp

    Filesize

    2.7MB

  • memory/2084-14-0x000007FEFAAB0000-0x000007FEFAAC1000-memory.dmp

    Filesize

    68KB

  • memory/2084-13-0x000007FEFAAD0000-0x000007FEFAAED000-memory.dmp

    Filesize

    116KB

  • memory/2084-16-0x000007FEF7650000-0x000007FEF7691000-memory.dmp

    Filesize

    260KB

  • memory/2084-15-0x000007FEF5D60000-0x000007FEF5F6B000-memory.dmp

    Filesize

    2.0MB

  • memory/2084-18-0x000007FEF7620000-0x000007FEF7641000-memory.dmp

    Filesize

    132KB

  • memory/2084-21-0x000007FEF6AE0000-0x000007FEF6AF1000-memory.dmp

    Filesize

    68KB

  • memory/2084-23-0x000007FEF6AA0000-0x000007FEF6ABB000-memory.dmp

    Filesize

    108KB

  • memory/2084-27-0x000007FEF60B0000-0x000007FEF6117000-memory.dmp

    Filesize

    412KB

  • memory/2084-26-0x000007FEF6120000-0x000007FEF6150000-memory.dmp

    Filesize

    192KB

  • memory/2084-34-0x000007FEF5BD0000-0x000007FEF5BF3000-memory.dmp

    Filesize

    140KB

  • memory/2084-36-0x000007FEF5B90000-0x000007FEF5BA2000-memory.dmp

    Filesize

    72KB

  • memory/2084-35-0x000007FEF5BB0000-0x000007FEF5BC1000-memory.dmp

    Filesize

    68KB

  • memory/2084-33-0x000007FEF5C00000-0x000007FEF5C18000-memory.dmp

    Filesize

    96KB

  • memory/2084-32-0x000007FEF5C20000-0x000007FEF5C44000-memory.dmp

    Filesize

    144KB

  • memory/2084-31-0x000007FEF5C50000-0x000007FEF5C78000-memory.dmp

    Filesize

    160KB

  • memory/2084-43-0x000007FEF58B0000-0x000007FEF58C2000-memory.dmp

    Filesize

    72KB

  • memory/2084-42-0x000007FEF58D0000-0x000007FEF58E1000-memory.dmp

    Filesize

    68KB

  • memory/2084-41-0x000007FEF5910000-0x000007FEF5925000-memory.dmp

    Filesize

    84KB

  • memory/2084-40-0x000007FEF5930000-0x000007FEF5946000-memory.dmp

    Filesize

    88KB

  • memory/2084-50-0x000007FEF4590000-0x000007FEF45A6000-memory.dmp

    Filesize

    88KB

  • memory/2084-49-0x000007FEF45B0000-0x000007FEF45C1000-memory.dmp

    Filesize

    68KB

  • memory/2084-48-0x000007FEF5830000-0x000007FEF5841000-memory.dmp

    Filesize

    68KB

  • memory/2084-47-0x000007FEF5850000-0x000007FEF5861000-memory.dmp

    Filesize

    68KB

  • memory/2084-17-0x000007FEF4750000-0x000007FEF5800000-memory.dmp

    Filesize

    16.7MB

  • memory/2084-46-0x000007FEF5870000-0x000007FEF5884000-memory.dmp

    Filesize

    80KB

  • memory/2084-45-0x000007FEF5890000-0x000007FEF58A3000-memory.dmp

    Filesize

    76KB

  • memory/2084-44-0x000007FEF45D0000-0x000007FEF474A000-memory.dmp

    Filesize

    1.5MB

  • memory/2084-39-0x000007FEF5950000-0x000007FEF5961000-memory.dmp

    Filesize

    68KB

  • memory/2084-38-0x000007FEF5970000-0x000007FEF599F000-memory.dmp

    Filesize

    188KB

  • memory/2084-37-0x000007FEF6A90000-0x000007FEF6AA0000-memory.dmp

    Filesize

    64KB

  • memory/2084-30-0x000007FEF5C80000-0x000007FEF5CD7000-memory.dmp

    Filesize

    348KB

  • memory/2084-29-0x000007FEF6090000-0x000007FEF60A1000-memory.dmp

    Filesize

    68KB

  • memory/2084-28-0x000007FEF5CE0000-0x000007FEF5D5C000-memory.dmp

    Filesize

    496KB

  • memory/2084-25-0x000007FEF6150000-0x000007FEF6168000-memory.dmp

    Filesize

    96KB

  • memory/2084-24-0x000007FEF6170000-0x000007FEF6181000-memory.dmp

    Filesize

    68KB

  • memory/2084-22-0x000007FEF6AC0000-0x000007FEF6AD1000-memory.dmp

    Filesize

    68KB

  • memory/2084-20-0x000007FEF6B00000-0x000007FEF6B11000-memory.dmp

    Filesize

    68KB

  • memory/2084-19-0x000007FEFAA90000-0x000007FEFAAA8000-memory.dmp

    Filesize

    96KB