Analysis
-
max time kernel
140s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
13-09-2024 23:30
Static task
static1
Behavioral task
behavioral1
Sample
macro era 9.1fdsadsfasdafsafdsadfsafd.rec
Resource
win7-20240903-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
macro era 9.1fdsadsfasdafsafdsadfsafd.rec
Resource
win10v2004-20240802-en
windows10-2004-x64
12 signatures
150 seconds
General
-
Target
macro era 9.1fdsadsfasdafsafdsadfsafd.rec
-
Size
5KB
-
MD5
57ae3420dada0261379c4356c3b68349
-
SHA1
6a8393e4026ad275a48b04cfacbad7b4e76464f1
-
SHA256
eb0945e8345465fad4b6a808354dc6ac5bdd9fa393e6b88f2333777572342749
-
SHA512
310c0da7dca02103dc1c650318526f00c7d83d19a5a5957b5a00f4b9d631718556f075cb03bf965d276c919951921edde035a1770925b2fae2d9d81eca9537cc
-
SSDEEP
48:LpNl+G2YO8qtzBb9iaXqoIILY1AY0DgRRajsP+lcoEMX6:V+YO8qtBbpqo6KYggRRajsP+lcHz
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2844 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2844 vlc.exe -
Suspicious use of FindShellTrayWindow 13 IoCs
pid Process 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe -
Suspicious use of SendNotifyMessage 12 IoCs
pid Process 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe 2844 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2844 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\macro era 9.1fdsadsfasdafsafdsadfsafd.rec"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2844