Analysis

  • max time kernel
    30s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/11/2024, 11:53

General

  • Target

    audio.mp3

  • Size

    586KB

  • MD5

    18cc509865fa6c0935ecd95665bc6a62

  • SHA1

    9ba5ab2edbaad73d8622d8697065a93e83f4fba9

  • SHA256

    8743d0ca21e63e8989031e976a8618e3454c9a9b62a097866953af3d1a605de5

  • SHA512

    eb768f0320f370e14e2db25928a934d657c5acc260dcb37eef9a496918c99d1aafe9f18c8e197da53855f2cbe935842b41c0d9ea65c177149472dd12dd5b2731

  • SSDEEP

    6144:NWNoi7BJfHaaOycCWPK6X6X1u0TsI++WwNeeeeeeeeeeeeeLd/rtjjjj63DrIlB:UP7jf6aOUWKu0kwAhtjjjj63Dre

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\audio.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2644
  • C:\Windows\system32\SndVol.exe
    SndVol.exe -f 45941911 13455
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1204-49-0x0000000000110000-0x0000000000111000-memory.dmp

    Filesize

    4KB

  • memory/1204-92-0x0000000000110000-0x0000000000111000-memory.dmp

    Filesize

    4KB

  • memory/2644-31-0x000007FEF5420000-0x000007FEF5431000-memory.dmp

    Filesize

    68KB

  • memory/2644-44-0x000007FEF31F0000-0x000007FEF3203000-memory.dmp

    Filesize

    76KB

  • memory/2644-48-0x000007FEF3170000-0x000007FEF3181000-memory.dmp

    Filesize

    68KB

  • memory/2644-14-0x000007FEFAA90000-0x000007FEFAAA1000-memory.dmp

    Filesize

    68KB

  • memory/2644-13-0x000007FEFAC70000-0x000007FEFAC87000-memory.dmp

    Filesize

    92KB

  • memory/2644-12-0x000007FEFAC90000-0x000007FEFACA1000-memory.dmp

    Filesize

    68KB

  • memory/2644-11-0x000007FEFAEC0000-0x000007FEFAED7000-memory.dmp

    Filesize

    92KB

  • memory/2644-9-0x000007FEF7D10000-0x000007FEF7FC6000-memory.dmp

    Filesize

    2.7MB

  • memory/2644-38-0x000007FEF5240000-0x000007FEF5305000-memory.dmp

    Filesize

    788KB

  • memory/2644-18-0x000007FEF54C0000-0x000007FEF56CB000-memory.dmp

    Filesize

    2.0MB

  • memory/2644-41-0x000007FEF33B0000-0x000007FEF33C1000-memory.dmp

    Filesize

    68KB

  • memory/2644-42-0x000007FEF3390000-0x000007FEF33A2000-memory.dmp

    Filesize

    72KB

  • memory/2644-40-0x000007FEF3590000-0x000007FEF35B8000-memory.dmp

    Filesize

    160KB

  • memory/2644-39-0x000007FEF35C0000-0x000007FEF3617000-memory.dmp

    Filesize

    348KB

  • memory/2644-37-0x000007FEF5310000-0x000007FEF5321000-memory.dmp

    Filesize

    68KB

  • memory/2644-36-0x000007FEF5330000-0x000007FEF5343000-memory.dmp

    Filesize

    76KB

  • memory/2644-35-0x000007FEF5350000-0x000007FEF537F000-memory.dmp

    Filesize

    188KB

  • memory/2644-34-0x000007FEF5380000-0x000007FEF53D7000-memory.dmp

    Filesize

    348KB

  • memory/2644-33-0x000007FEF53E0000-0x000007FEF53F1000-memory.dmp

    Filesize

    68KB

  • memory/2644-32-0x000007FEF5400000-0x000007FEF5418000-memory.dmp

    Filesize

    96KB

  • memory/2644-16-0x000007FEFA7D0000-0x000007FEFA7E1000-memory.dmp

    Filesize

    68KB

  • memory/2644-7-0x000000013F450000-0x000000013F548000-memory.dmp

    Filesize

    992KB

  • memory/2644-15-0x000007FEFAA70000-0x000007FEFAA8D000-memory.dmp

    Filesize

    116KB

  • memory/2644-47-0x000007FEF3190000-0x000007FEF31A1000-memory.dmp

    Filesize

    68KB

  • memory/2644-46-0x000007FEF31B0000-0x000007FEF31C1000-memory.dmp

    Filesize

    68KB

  • memory/2644-45-0x000007FEF31D0000-0x000007FEF31E4000-memory.dmp

    Filesize

    80KB

  • memory/2644-43-0x000007FEF3210000-0x000007FEF338A000-memory.dmp

    Filesize

    1.5MB

  • memory/2644-30-0x000007FEF5440000-0x000007FEF54BC000-memory.dmp

    Filesize

    496KB

  • memory/2644-17-0x000007FEF56D0000-0x000007FEF6780000-memory.dmp

    Filesize

    16.7MB

  • memory/2644-29-0x000007FEF6B00000-0x000007FEF6B67000-memory.dmp

    Filesize

    412KB

  • memory/2644-28-0x000007FEF6B70000-0x000007FEF6BA0000-memory.dmp

    Filesize

    192KB

  • memory/2644-27-0x000007FEF6BA0000-0x000007FEF6BB8000-memory.dmp

    Filesize

    96KB

  • memory/2644-26-0x000007FEF6BC0000-0x000007FEF6BD1000-memory.dmp

    Filesize

    68KB

  • memory/2644-25-0x000007FEF6BE0000-0x000007FEF6BFB000-memory.dmp

    Filesize

    108KB

  • memory/2644-24-0x000007FEF7140000-0x000007FEF7151000-memory.dmp

    Filesize

    68KB

  • memory/2644-23-0x000007FEF7160000-0x000007FEF7171000-memory.dmp

    Filesize

    68KB

  • memory/2644-22-0x000007FEF7CD0000-0x000007FEF7CE1000-memory.dmp

    Filesize

    68KB

  • memory/2644-21-0x000007FEF7CF0000-0x000007FEF7D08000-memory.dmp

    Filesize

    96KB

  • memory/2644-20-0x000007FEFA7A0000-0x000007FEFA7C1000-memory.dmp

    Filesize

    132KB

  • memory/2644-19-0x000007FEF7180000-0x000007FEF71C1000-memory.dmp

    Filesize

    260KB

  • memory/2644-10-0x000007FEFB3A0000-0x000007FEFB3B8000-memory.dmp

    Filesize

    96KB

  • memory/2644-8-0x000007FEFAD30000-0x000007FEFAD64000-memory.dmp

    Filesize

    208KB