Analysis
-
max time kernel
140s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
09-10-2024 18:44
Static task
static1
Behavioral task
behavioral1
Sample
Ther.mp3
Resource
win7-20240704-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ther.mp3
Resource
win10v2004-20241007-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
Ther.mp3
-
Size
4.8MB
-
MD5
caf2e7bf786d09b60c352d6067623577
-
SHA1
24a1a384376d53aa08308d54c51b8ad5be030b8f
-
SHA256
a69ba03a6a908821c6783ab21252ad82272e2219bd4701ac6373901ebcd35535
-
SHA512
0580fc7c0e4591e4982c9a68af326ca702859b0dfb6341dc745430569592ec22fa68cc0074158fac91f4141bf2d03f5ff30d48a484c45d86f88339dff343effe
-
SSDEEP
98304:O5d2bKKUkII9D6wiseq6KZmJGYycMKu2QiuK3nX2LMz32wR8e0PrwDHatdwjc7tN:w0Nz9qJqsJGXkQy3X2wz32e0TwGzwI7b
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1296 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1296 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 1296 vlc.exe Token: SeIncBasePriorityPrivilege 1296 vlc.exe -
Suspicious use of FindShellTrayWindow 6 IoCs
pid Process 1296 vlc.exe 1296 vlc.exe 1296 vlc.exe 1296 vlc.exe 1296 vlc.exe 1296 vlc.exe -
Suspicious use of SendNotifyMessage 5 IoCs
pid Process 1296 vlc.exe 1296 vlc.exe 1296 vlc.exe 1296 vlc.exe 1296 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1296 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Ther.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1296