Analysis

  • max time kernel
    141s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14-09-2024 02:16

General

  • Target

    assets/Logo/logo1.mp4

  • Size

    1.3MB

  • MD5

    7dade903ec1d5adf3599b99fd419ddbc

  • SHA1

    790aebf6ef1ba0b0b72fb4256e88ec4de771d9cc

  • SHA256

    8ee42d18a101f3fa6b189f528009dea40ce3440477154015f0d75aeb82f02aa0

  • SHA512

    0f4294139eb32b26c44548451a9330ff54ab138cd12119533db7f618b42d03a22e1964e6f5ad1d18ff560319baa67ee1622691c0426606240a77d2df971de65a

  • SSDEEP

    24576:za0BU5sqc6ZTtDu6HvFFoUZB01a37IAwDIaZte34G0ulgORGL0Z9UDNUA5ueX:zLmhd7HPFFoYZ37IAwDmomxGoZ9qOA55

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 28 IoCs
  • Suspicious use of SendNotifyMessage 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\assets\Logo\logo1.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:3020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3020-6-0x000007FEF7AD0000-0x000007FEF7B04000-memory.dmp

    Filesize

    208KB

  • memory/3020-5-0x000000013F030000-0x000000013F128000-memory.dmp

    Filesize

    992KB

  • memory/3020-8-0x000007FEFB9E0000-0x000007FEFB9F8000-memory.dmp

    Filesize

    96KB

  • memory/3020-14-0x000007FEF6F50000-0x000007FEF6F61000-memory.dmp

    Filesize

    68KB

  • memory/3020-13-0x000007FEF6F70000-0x000007FEF6F8D000-memory.dmp

    Filesize

    116KB

  • memory/3020-12-0x000007FEF6F90000-0x000007FEF6FA1000-memory.dmp

    Filesize

    68KB

  • memory/3020-11-0x000007FEF7AB0000-0x000007FEF7AC7000-memory.dmp

    Filesize

    92KB

  • memory/3020-10-0x000007FEF7D90000-0x000007FEF7DA1000-memory.dmp

    Filesize

    68KB

  • memory/3020-9-0x000007FEFACB0000-0x000007FEFACC7000-memory.dmp

    Filesize

    92KB

  • memory/3020-7-0x000007FEF62E0000-0x000007FEF6596000-memory.dmp

    Filesize

    2.7MB

  • memory/3020-22-0x000007FEF69F0000-0x000007FEF6A01000-memory.dmp

    Filesize

    68KB

  • memory/3020-32-0x000007FEF6920000-0x000007FEF6937000-memory.dmp

    Filesize

    92KB

  • memory/3020-31-0x000007FEF4D50000-0x000007FEF4ED0000-memory.dmp

    Filesize

    1.5MB

  • memory/3020-30-0x000007FEF4ED0000-0x000007FEF4F27000-memory.dmp

    Filesize

    348KB

  • memory/3020-29-0x000007FEF6940000-0x000007FEF6951000-memory.dmp

    Filesize

    68KB

  • memory/3020-28-0x000007FEF4F30000-0x000007FEF4FAC000-memory.dmp

    Filesize

    496KB

  • memory/3020-27-0x000007FEF4FB0000-0x000007FEF5017000-memory.dmp

    Filesize

    412KB

  • memory/3020-26-0x000007FEF6960000-0x000007FEF6990000-memory.dmp

    Filesize

    192KB

  • memory/3020-25-0x000007FEF6990000-0x000007FEF69A8000-memory.dmp

    Filesize

    96KB

  • memory/3020-24-0x000007FEF69B0000-0x000007FEF69C1000-memory.dmp

    Filesize

    68KB

  • memory/3020-23-0x000007FEF69D0000-0x000007FEF69EB000-memory.dmp

    Filesize

    108KB

  • memory/3020-19-0x000007FEF6A50000-0x000007FEF6A68000-memory.dmp

    Filesize

    96KB

  • memory/3020-21-0x000007FEF6A10000-0x000007FEF6A21000-memory.dmp

    Filesize

    68KB

  • memory/3020-20-0x000007FEF6A30000-0x000007FEF6A41000-memory.dmp

    Filesize

    68KB

  • memory/3020-16-0x000007FEF5020000-0x000007FEF522B000-memory.dmp

    Filesize

    2.0MB

  • memory/3020-18-0x000007FEF6F20000-0x000007FEF6F41000-memory.dmp

    Filesize

    132KB

  • memory/3020-17-0x000007FEF6A70000-0x000007FEF6AB1000-memory.dmp

    Filesize

    260KB

  • memory/3020-15-0x000007FEF5230000-0x000007FEF62E0000-memory.dmp

    Filesize

    16.7MB

  • memory/3020-33-0x000007FEF34E0000-0x000007FEF4D4F000-memory.dmp

    Filesize

    24.4MB

  • memory/3020-35-0x000007FEF32B0000-0x000007FEF32C2000-memory.dmp

    Filesize

    72KB

  • memory/3020-34-0x000007FEF32D0000-0x000007FEF34D6000-memory.dmp

    Filesize

    2.0MB

  • memory/3020-37-0x000007FEF3210000-0x000007FEF325D000-memory.dmp

    Filesize

    308KB

  • memory/3020-38-0x000007FEFACA0000-0x000007FEFACB0000-memory.dmp

    Filesize

    64KB

  • memory/3020-39-0x000007FEF2DC0000-0x000007FEF2DEF000-memory.dmp

    Filesize

    188KB

  • memory/3020-40-0x000007FEF2DA0000-0x000007FEF2DB1000-memory.dmp

    Filesize

    68KB

  • memory/3020-41-0x000007FEF2D80000-0x000007FEF2D96000-memory.dmp

    Filesize

    88KB

  • memory/3020-36-0x000007FEF3260000-0x000007FEF32A2000-memory.dmp

    Filesize

    264KB

  • memory/3020-42-0x000007FEF2CB0000-0x000007FEF2D75000-memory.dmp

    Filesize

    788KB

  • memory/3020-43-0x000007FEF2C60000-0x000007FEF2CA2000-memory.dmp

    Filesize

    264KB

  • memory/3020-44-0x000007FEF2BF0000-0x000007FEF2C52000-memory.dmp

    Filesize

    392KB

  • memory/3020-45-0x000007FEF2B80000-0x000007FEF2BED000-memory.dmp

    Filesize

    436KB

  • memory/3020-46-0x000007FEF2820000-0x000007FEF2AD0000-memory.dmp

    Filesize

    2.7MB

  • memory/3020-47-0x000007FEF27E0000-0x000007FEF27F5000-memory.dmp

    Filesize

    84KB

  • memory/3020-48-0x000007FEF27B0000-0x000007FEF27D3000-memory.dmp

    Filesize

    140KB

  • memory/3020-49-0x000007FEF2790000-0x000007FEF27A3000-memory.dmp

    Filesize

    76KB

  • memory/3020-50-0x000007FEF2770000-0x000007FEF2781000-memory.dmp

    Filesize

    68KB

  • memory/3020-51-0x000007FEF2750000-0x000007FEF2762000-memory.dmp

    Filesize

    72KB

  • memory/3020-52-0x000007FEF2640000-0x000007FEF2746000-memory.dmp

    Filesize

    1.0MB

  • memory/3020-53-0x000007FEF24C0000-0x000007FEF263A000-memory.dmp

    Filesize

    1.5MB

  • memory/3020-54-0x000007FEF2490000-0x000007FEF24BA000-memory.dmp

    Filesize

    168KB

  • memory/3020-55-0x000007FEF2470000-0x000007FEF2483000-memory.dmp

    Filesize

    76KB

  • memory/3020-56-0x000007FEF2450000-0x000007FEF246B000-memory.dmp

    Filesize

    108KB

  • memory/3020-57-0x000007FEF22A0000-0x000007FEF22B1000-memory.dmp

    Filesize

    68KB

  • memory/3020-64-0x000007FEF19A0000-0x000007FEF19D4000-memory.dmp

    Filesize

    208KB

  • memory/3020-63-0x000007FEF0190000-0x000007FEF01E7000-memory.dmp

    Filesize

    348KB

  • memory/3020-62-0x000007FEF01F0000-0x000007FEF023E000-memory.dmp

    Filesize

    312KB

  • memory/3020-61-0x000007FEF1FF0000-0x000007FEF2001000-memory.dmp

    Filesize

    68KB

  • memory/3020-60-0x000007FEF2160000-0x000007FEF21D4000-memory.dmp

    Filesize

    464KB

  • memory/3020-59-0x000007FEF21E0000-0x000007FEF2227000-memory.dmp

    Filesize

    284KB

  • memory/3020-58-0x000007FEF2230000-0x000007FEF2291000-memory.dmp

    Filesize

    388KB