Resubmissions

19/11/2024, 12:07

241119-patfgs1jdr 8

19/11/2024, 12:00

241119-n6l6ls1jbk 6

19/11/2024, 11:54

241119-n2yzlszrfk 6

Analysis

  • max time kernel
    70s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    19/11/2024, 11:54

General

  • Target

    audio.mp3

  • Size

    586KB

  • MD5

    18cc509865fa6c0935ecd95665bc6a62

  • SHA1

    9ba5ab2edbaad73d8622d8697065a93e83f4fba9

  • SHA256

    8743d0ca21e63e8989031e976a8618e3454c9a9b62a097866953af3d1a605de5

  • SHA512

    eb768f0320f370e14e2db25928a934d657c5acc260dcb37eef9a496918c99d1aafe9f18c8e197da53855f2cbe935842b41c0d9ea65c177149472dd12dd5b2731

  • SSDEEP

    6144:NWNoi7BJfHaaOycCWPK6X6X1u0TsI++WwNeeeeeeeeeeeeeLd/rtjjjj63DrIlB:UP7jf6aOUWKu0kwAhtjjjj63Dre

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\audio.mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2360-6-0x000007FEF7E30000-0x000007FEF7E64000-memory.dmp

    Filesize

    208KB

  • memory/2360-5-0x000000013F740000-0x000000013F838000-memory.dmp

    Filesize

    992KB

  • memory/2360-8-0x000007FEFBC70000-0x000007FEFBC88000-memory.dmp

    Filesize

    96KB

  • memory/2360-13-0x000007FEF72B0000-0x000007FEF72CD000-memory.dmp

    Filesize

    116KB

  • memory/2360-12-0x000007FEF72D0000-0x000007FEF72E1000-memory.dmp

    Filesize

    68KB

  • memory/2360-11-0x000007FEF72F0000-0x000007FEF7307000-memory.dmp

    Filesize

    92KB

  • memory/2360-10-0x000007FEF7E10000-0x000007FEF7E21000-memory.dmp

    Filesize

    68KB

  • memory/2360-7-0x000007FEF6640000-0x000007FEF68F6000-memory.dmp

    Filesize

    2.7MB

  • memory/2360-9-0x000007FEFAFF0000-0x000007FEFB007000-memory.dmp

    Filesize

    92KB

  • memory/2360-15-0x000007FEF7290000-0x000007FEF72A1000-memory.dmp

    Filesize

    68KB

  • memory/2360-22-0x000007FEF6D00000-0x000007FEF6D1B000-memory.dmp

    Filesize

    108KB

  • memory/2360-14-0x000007FEF6430000-0x000007FEF663B000-memory.dmp

    Filesize

    2.0MB

  • memory/2360-25-0x000007FEF6C90000-0x000007FEF6CC0000-memory.dmp

    Filesize

    192KB

  • memory/2360-24-0x000007FEF6CC0000-0x000007FEF6CD8000-memory.dmp

    Filesize

    96KB

  • memory/2360-23-0x000007FEF6CE0000-0x000007FEF6CF1000-memory.dmp

    Filesize

    68KB

  • memory/2360-21-0x000007FEF6D20000-0x000007FEF6D31000-memory.dmp

    Filesize

    68KB

  • memory/2360-20-0x000007FEF6D40000-0x000007FEF6D51000-memory.dmp

    Filesize

    68KB

  • memory/2360-19-0x000007FEF6D60000-0x000007FEF6D71000-memory.dmp

    Filesize

    68KB

  • memory/2360-18-0x000007FEF6D80000-0x000007FEF6D98000-memory.dmp

    Filesize

    96KB

  • memory/2360-17-0x000007FEF6DA0000-0x000007FEF6DC1000-memory.dmp

    Filesize

    132KB

  • memory/2360-16-0x000007FEF6DD0000-0x000007FEF6E11000-memory.dmp

    Filesize

    260KB

  • memory/2360-27-0x000007FEF5310000-0x000007FEF5377000-memory.dmp

    Filesize

    412KB

  • memory/2360-35-0x000007FEF5180000-0x000007FEF5191000-memory.dmp

    Filesize

    68KB

  • memory/2360-38-0x000007FEF3400000-0x000007FEF3428000-memory.dmp

    Filesize

    160KB

  • memory/2360-42-0x000007FEF3200000-0x000007FEF3212000-memory.dmp

    Filesize

    72KB

  • memory/2360-41-0x000007FEF3220000-0x000007FEF3231000-memory.dmp

    Filesize

    68KB

  • memory/2360-40-0x000007FEF3260000-0x000007FEF3275000-memory.dmp

    Filesize

    84KB

  • memory/2360-39-0x000007FEF3280000-0x000007FEF32ED000-memory.dmp

    Filesize

    436KB

  • memory/2360-26-0x000007FEF5380000-0x000007FEF6430000-memory.dmp

    Filesize

    16.7MB

  • memory/2360-37-0x000007FEF3430000-0x000007FEF3487000-memory.dmp

    Filesize

    348KB

  • memory/2360-36-0x000007FEF50B0000-0x000007FEF5175000-memory.dmp

    Filesize

    788KB

  • memory/2360-34-0x000007FEF51A0000-0x000007FEF51B3000-memory.dmp

    Filesize

    76KB

  • memory/2360-33-0x000007FEF51C0000-0x000007FEF51EF000-memory.dmp

    Filesize

    188KB

  • memory/2360-32-0x000007FEF51F0000-0x000007FEF5247000-memory.dmp

    Filesize

    348KB

  • memory/2360-31-0x000007FEF5250000-0x000007FEF5261000-memory.dmp

    Filesize

    68KB

  • memory/2360-30-0x000007FEF5270000-0x000007FEF5288000-memory.dmp

    Filesize

    96KB

  • memory/2360-29-0x000007FEF6C70000-0x000007FEF6C81000-memory.dmp

    Filesize

    68KB

  • memory/2360-28-0x000007FEF5290000-0x000007FEF530C000-memory.dmp

    Filesize

    496KB

  • memory/2360-43-0x000007FEF3080000-0x000007FEF31FA000-memory.dmp

    Filesize

    1.5MB

  • memory/2360-44-0x000007FEF3060000-0x000007FEF3073000-memory.dmp

    Filesize

    76KB

  • memory/2360-45-0x000007FEF3040000-0x000007FEF3054000-memory.dmp

    Filesize

    80KB

  • memory/2360-46-0x000007FEF3020000-0x000007FEF3031000-memory.dmp

    Filesize

    68KB

  • memory/2360-48-0x000007FEF2FE0000-0x000007FEF2FF1000-memory.dmp

    Filesize

    68KB

  • memory/2360-47-0x000007FEF3000000-0x000007FEF3011000-memory.dmp

    Filesize

    68KB

  • memory/2360-51-0x000007FEF6640000-0x000007FEF68F6000-memory.dmp

    Filesize

    2.7MB