Resubmissions

15/10/2024, 23:54

241015-3x4fvsxemq 8

15/10/2024, 23:51

241015-3v719sxdrl 7

Analysis

  • max time kernel
    140s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2024, 23:54

General

  • Target

    Payload/Mabz.app/back.mp4

  • Size

    1.1MB

  • MD5

    47bf44170a778891f33ba0303eb1f8ca

  • SHA1

    7a9fd4e37fb3ad35dce325a3de1e672e5c0f41ab

  • SHA256

    72eaa3f85cdd325c38987925c84af255ba88fece77c3ea94d0fc679ad71ac9f8

  • SHA512

    dac266eb49bf0ccb59425e798d9d79889fe7e34eb6b0bf4782d7afb57c0fb7926396ea9db51dd527c9b1a2af0b99d5927ff888cd97a4d3017b6e31b279e7b8aa

  • SSDEEP

    24576:LGJgV9LV1Yv1x0xw24+Ub984a2aecGpuTZ:aCLLPQ1IU+698maZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 15 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Payload\Mabz.app\back.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1520-5-0x000000013F750000-0x000000013F848000-memory.dmp

    Filesize

    992KB

  • memory/1520-6-0x000007FEFB270000-0x000007FEFB2A4000-memory.dmp

    Filesize

    208KB

  • memory/1520-14-0x000007FEFB060000-0x000007FEFB071000-memory.dmp

    Filesize

    68KB

  • memory/1520-13-0x000007FEFB080000-0x000007FEFB09D000-memory.dmp

    Filesize

    116KB

  • memory/1520-12-0x000007FEFB0A0000-0x000007FEFB0B1000-memory.dmp

    Filesize

    68KB

  • memory/1520-11-0x000007FEFB1E0000-0x000007FEFB1F7000-memory.dmp

    Filesize

    92KB

  • memory/1520-10-0x000007FEFB200000-0x000007FEFB211000-memory.dmp

    Filesize

    68KB

  • memory/1520-9-0x000007FEFB220000-0x000007FEFB237000-memory.dmp

    Filesize

    92KB

  • memory/1520-7-0x000007FEF7860000-0x000007FEF7B16000-memory.dmp

    Filesize

    2.7MB

  • memory/1520-8-0x000007FEFBC80000-0x000007FEFBC98000-memory.dmp

    Filesize

    96KB

  • memory/1520-16-0x000007FEF55D0000-0x000007FEF57DB000-memory.dmp

    Filesize

    2.0MB

  • memory/1520-17-0x000007FEFAB70000-0x000007FEFABB1000-memory.dmp

    Filesize

    260KB

  • memory/1520-20-0x000007FEFAB30000-0x000007FEFAB41000-memory.dmp

    Filesize

    68KB

  • memory/1520-19-0x000007FEFAB50000-0x000007FEFAB68000-memory.dmp

    Filesize

    96KB

  • memory/1520-18-0x000007FEFAFE0000-0x000007FEFB001000-memory.dmp

    Filesize

    132KB

  • memory/1520-21-0x000007FEF7840000-0x000007FEF7851000-memory.dmp

    Filesize

    68KB

  • memory/1520-32-0x000007FEF5290000-0x000007FEF52A7000-memory.dmp

    Filesize

    92KB

  • memory/1520-15-0x000007FEF57E0000-0x000007FEF6890000-memory.dmp

    Filesize

    16.7MB

  • memory/1520-31-0x000007FEF52B0000-0x000007FEF5430000-memory.dmp

    Filesize

    1.5MB

  • memory/1520-30-0x000007FEF5430000-0x000007FEF5487000-memory.dmp

    Filesize

    348KB

  • memory/1520-29-0x000007FEF5490000-0x000007FEF54A1000-memory.dmp

    Filesize

    68KB

  • memory/1520-28-0x000007FEF54B0000-0x000007FEF552C000-memory.dmp

    Filesize

    496KB

  • memory/1520-46-0x000007FEF2DF0000-0x000007FEF2E02000-memory.dmp

    Filesize

    72KB

  • memory/1520-54-0x000007FEF26A0000-0x000007FEF26D4000-memory.dmp

    Filesize

    208KB

  • memory/1520-53-0x000007FEF26E0000-0x000007FEF2737000-memory.dmp

    Filesize

    348KB

  • memory/1520-52-0x000007FEF2740000-0x000007FEF278E000-memory.dmp

    Filesize

    312KB

  • memory/1520-51-0x000007FEF2A30000-0x000007FEF2A41000-memory.dmp

    Filesize

    68KB

  • memory/1520-33-0x000007FEF3A20000-0x000007FEF528F000-memory.dmp

    Filesize

    24.4MB

  • memory/1520-50-0x000007FEF2BA0000-0x000007FEF2C14000-memory.dmp

    Filesize

    464KB

  • memory/1520-49-0x000007FEF2C20000-0x000007FEF2C67000-memory.dmp

    Filesize

    284KB

  • memory/1520-48-0x000007FEF2C70000-0x000007FEF2CD1000-memory.dmp

    Filesize

    388KB

  • memory/1520-47-0x000007FEF2CE0000-0x000007FEF2CF1000-memory.dmp

    Filesize

    68KB

  • memory/1520-45-0x000007FEF2E10000-0x000007FEF2E24000-memory.dmp

    Filesize

    80KB

  • memory/1520-43-0x000007FEF2E50000-0x000007FEF2E65000-memory.dmp

    Filesize

    84KB

  • memory/1520-42-0x000007FEF2E70000-0x000007FEF2E82000-memory.dmp

    Filesize

    72KB

  • memory/1520-41-0x000007FEF2E90000-0x000007FEF2EAB000-memory.dmp

    Filesize

    108KB

  • memory/1520-40-0x000007FEF2EB0000-0x000007FEF2EC3000-memory.dmp

    Filesize

    76KB

  • memory/1520-44-0x000007FEF2E30000-0x000007FEF2E43000-memory.dmp

    Filesize

    76KB

  • memory/1520-39-0x000007FEF2ED0000-0x000007FEF2EFA000-memory.dmp

    Filesize

    168KB

  • memory/1520-38-0x000007FEF3060000-0x000007FEF3075000-memory.dmp

    Filesize

    84KB

  • memory/1520-37-0x000007FEF3750000-0x000007FEF379D000-memory.dmp

    Filesize

    308KB

  • memory/1520-36-0x000007FEF37A0000-0x000007FEF37E2000-memory.dmp

    Filesize

    264KB

  • memory/1520-35-0x000007FEF37F0000-0x000007FEF3802000-memory.dmp

    Filesize

    72KB

  • memory/1520-34-0x000007FEF3810000-0x000007FEF3A16000-memory.dmp

    Filesize

    2.0MB

  • memory/1520-27-0x000007FEF5530000-0x000007FEF5597000-memory.dmp

    Filesize

    412KB

  • memory/1520-26-0x000007FEF55A0000-0x000007FEF55D0000-memory.dmp

    Filesize

    192KB

  • memory/1520-25-0x000007FEF6CC0000-0x000007FEF6CD8000-memory.dmp

    Filesize

    96KB

  • memory/1520-24-0x000007FEF6CE0000-0x000007FEF6CF1000-memory.dmp

    Filesize

    68KB

  • memory/1520-23-0x000007FEF6D00000-0x000007FEF6D1B000-memory.dmp

    Filesize

    108KB

  • memory/1520-22-0x000007FEF6D20000-0x000007FEF6D31000-memory.dmp

    Filesize

    68KB

  • memory/1520-57-0x000007FEF7860000-0x000007FEF7B16000-memory.dmp

    Filesize

    2.7MB