Analysis
-
max time kernel
26s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
19-09-2024 08:28
Static task
static1
Behavioral task
behavioral1
Sample
goku_dancing_1.mov
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
goku_dancing_1.mov
Resource
win10v2004-20240802-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
goku_dancing_1.mov
-
Size
1.1MB
-
MD5
34a8bef1dbc4891eec67e06072cf5c2a
-
SHA1
d8ca7142c88e37495a15d44fe07acde166158f6e
-
SHA256
54b477d409236424476bcf5e35498780864e1c0dc07e346440d3558946756425
-
SHA512
a285137f02ec0dafb37afd068ae854ab9049854922f07b8082e14eb241678f0e477971538b4ad4457e02a115c45f5cafa29caf9fbbbfc76151dea9e6cd1fd50a
-
SSDEEP
24576:H04PMbm3f/eCm98Jmu6FPNCrh6OAioM5i:H04Ubm3+Cu8JMvwkUoM5i
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2136 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2136 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2136 vlc.exe Token: SeIncBasePriorityPrivilege 2136 vlc.exe -
Suspicious use of FindShellTrayWindow 30 IoCs
pid Process 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe 2136 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2136 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\goku_dancing_1.mov"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2136