Analysis

  • max time kernel
    26s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19-09-2024 08:28

General

  • Target

    goku_dancing_1.mov

  • Size

    1.1MB

  • MD5

    34a8bef1dbc4891eec67e06072cf5c2a

  • SHA1

    d8ca7142c88e37495a15d44fe07acde166158f6e

  • SHA256

    54b477d409236424476bcf5e35498780864e1c0dc07e346440d3558946756425

  • SHA512

    a285137f02ec0dafb37afd068ae854ab9049854922f07b8082e14eb241678f0e477971538b4ad4457e02a115c45f5cafa29caf9fbbbfc76151dea9e6cd1fd50a

  • SSDEEP

    24576:H04PMbm3f/eCm98Jmu6FPNCrh6OAioM5i:H04Ubm3+Cu8JMvwkUoM5i

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 30 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\goku_dancing_1.mov"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2136-8-0x000007FEF7530000-0x000007FEF7564000-memory.dmp

    Filesize

    208KB

  • memory/2136-7-0x000000013F940000-0x000000013FA38000-memory.dmp

    Filesize

    992KB

  • memory/2136-12-0x000007FEF7510000-0x000007FEF7521000-memory.dmp

    Filesize

    68KB

  • memory/2136-16-0x000007FEF6EA0000-0x000007FEF6EB1000-memory.dmp

    Filesize

    68KB

  • memory/2136-15-0x000007FEF6EC0000-0x000007FEF6EDD000-memory.dmp

    Filesize

    116KB

  • memory/2136-9-0x000007FEF6230000-0x000007FEF64E6000-memory.dmp

    Filesize

    2.7MB

  • memory/2136-14-0x000007FEF6EE0000-0x000007FEF6EF1000-memory.dmp

    Filesize

    68KB

  • memory/2136-13-0x000007FEF6F00000-0x000007FEF6F17000-memory.dmp

    Filesize

    92KB

  • memory/2136-11-0x000007FEF7AC0000-0x000007FEF7AD7000-memory.dmp

    Filesize

    92KB

  • memory/2136-10-0x000007FEFB950000-0x000007FEFB968000-memory.dmp

    Filesize

    96KB

  • memory/2136-17-0x000007FEF6020000-0x000007FEF622B000-memory.dmp

    Filesize

    2.0MB

  • memory/2136-29-0x000007FEF4F00000-0x000007FEF4F67000-memory.dmp

    Filesize

    412KB

  • memory/2136-32-0x000007FEF4E20000-0x000007FEF4E77000-memory.dmp

    Filesize

    348KB

  • memory/2136-34-0x000007FEF6860000-0x000007FEF6877000-memory.dmp

    Filesize

    92KB

  • memory/2136-18-0x000007FEF4F70000-0x000007FEF6020000-memory.dmp

    Filesize

    16.7MB

  • memory/2136-33-0x000007FEF4CA0000-0x000007FEF4E20000-memory.dmp

    Filesize

    1.5MB

  • memory/2136-31-0x000007FEF6880000-0x000007FEF6891000-memory.dmp

    Filesize

    68KB

  • memory/2136-30-0x000007FEF4E80000-0x000007FEF4EFC000-memory.dmp

    Filesize

    496KB

  • memory/2136-27-0x000007FEF68D0000-0x000007FEF68E8000-memory.dmp

    Filesize

    96KB

  • memory/2136-26-0x000007FEF68F0000-0x000007FEF6901000-memory.dmp

    Filesize

    68KB

  • memory/2136-28-0x000007FEF68A0000-0x000007FEF68D0000-memory.dmp

    Filesize

    192KB

  • memory/2136-25-0x000007FEF6910000-0x000007FEF692B000-memory.dmp

    Filesize

    108KB

  • memory/2136-24-0x000007FEF6930000-0x000007FEF6941000-memory.dmp

    Filesize

    68KB

  • memory/2136-23-0x000007FEF6950000-0x000007FEF6961000-memory.dmp

    Filesize

    68KB

  • memory/2136-22-0x000007FEF6970000-0x000007FEF6981000-memory.dmp

    Filesize

    68KB

  • memory/2136-21-0x000007FEF6AE0000-0x000007FEF6AF8000-memory.dmp

    Filesize

    96KB

  • memory/2136-20-0x000007FEF6990000-0x000007FEF69B1000-memory.dmp

    Filesize

    132KB

  • memory/2136-19-0x000007FEF69C0000-0x000007FEF6A01000-memory.dmp

    Filesize

    260KB

  • memory/2136-40-0x000007FEF2FF0000-0x000007FEF315B000-memory.dmp

    Filesize

    1.4MB

  • memory/2136-39-0x000007FEF3160000-0x000007FEF31AD000-memory.dmp

    Filesize

    308KB

  • memory/2136-41-0x000007FEF2F90000-0x000007FEF2FE7000-memory.dmp

    Filesize

    348KB

  • memory/2136-35-0x000007FEF3430000-0x000007FEF4C9F000-memory.dmp

    Filesize

    24.4MB

  • memory/2136-38-0x000007FEF31B0000-0x000007FEF31F2000-memory.dmp

    Filesize

    264KB

  • memory/2136-37-0x000007FEF3200000-0x000007FEF3212000-memory.dmp

    Filesize

    72KB

  • memory/2136-36-0x000007FEF3220000-0x000007FEF3426000-memory.dmp

    Filesize

    2.0MB

  • memory/2136-43-0x000007FEFB570000-0x000007FEFB580000-memory.dmp

    Filesize

    64KB

  • memory/2136-44-0x000007FEF2D10000-0x000007FEF2D3F000-memory.dmp

    Filesize

    188KB

  • memory/2136-46-0x000007FEF2CD0000-0x000007FEF2CE6000-memory.dmp

    Filesize

    88KB

  • memory/2136-45-0x000007FEF2CF0000-0x000007FEF2D01000-memory.dmp

    Filesize

    68KB

  • memory/2136-42-0x000007FEF2D40000-0x000007FEF2F81000-memory.dmp

    Filesize

    2.3MB

  • memory/2136-47-0x000007FEF2C00000-0x000007FEF2CC5000-memory.dmp

    Filesize

    788KB

  • memory/2136-48-0x000007FEF2BB0000-0x000007FEF2BF2000-memory.dmp

    Filesize

    264KB

  • memory/2136-49-0x000007FEF2B40000-0x000007FEF2BA2000-memory.dmp

    Filesize

    392KB

  • memory/2136-50-0x000007FEF2AD0000-0x000007FEF2B3D000-memory.dmp

    Filesize

    436KB

  • memory/2136-52-0x000007FEF2750000-0x000007FEF2765000-memory.dmp

    Filesize

    84KB

  • memory/2136-54-0x000007FEF2700000-0x000007FEF2713000-memory.dmp

    Filesize

    76KB

  • memory/2136-53-0x000007FEF2720000-0x000007FEF2743000-memory.dmp

    Filesize

    140KB

  • memory/2136-51-0x000007FEF2770000-0x000007FEF2A20000-memory.dmp

    Filesize

    2.7MB

  • memory/2136-56-0x000007FEF25B0000-0x000007FEF25C1000-memory.dmp

    Filesize

    68KB

  • memory/2136-57-0x000007FEF21F0000-0x000007FEF2201000-memory.dmp

    Filesize

    68KB

  • memory/2136-55-0x000007FEF25D0000-0x000007FEF26D6000-memory.dmp

    Filesize

    1.0MB

  • memory/2136-58-0x000007FEF2180000-0x000007FEF21E1000-memory.dmp

    Filesize

    388KB

  • memory/2136-59-0x000007FEF2130000-0x000007FEF2177000-memory.dmp

    Filesize

    284KB

  • memory/2136-60-0x000007FEF20B0000-0x000007FEF2124000-memory.dmp

    Filesize

    464KB

  • memory/2136-61-0x000007FEF1F40000-0x000007FEF1F51000-memory.dmp

    Filesize

    68KB

  • memory/2136-62-0x000007FEF0000000-0x000007FEF004E000-memory.dmp

    Filesize

    312KB

  • memory/2136-63-0x000007FEEFFA0000-0x000007FEEFFF7000-memory.dmp

    Filesize

    348KB

  • memory/2136-64-0x000007FEEFF60000-0x000007FEEFF94000-memory.dmp

    Filesize

    208KB