Analysis
-
max time kernel
1191s -
max time network
836s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
19/11/2024, 14:05
Static task
static1
Behavioral task
behavioral1
Sample
3bnwbl3TR0BzBzyo.mp4
Resource
win7-20240903-en
6 signatures
1200 seconds
Behavioral task
behavioral2
Sample
3bnwbl3TR0BzBzyo.mp4
Resource
win10v2004-20241007-en
8 signatures
1200 seconds
General
-
Target
3bnwbl3TR0BzBzyo.mp4
-
Size
472KB
-
MD5
ff2d8be9b13e4113ba5e1fb1bf83442a
-
SHA1
59037f075c02e2cfac6235b552d04e84f77b36f0
-
SHA256
832cecf089ae033c4167d8fae2b13abe0ca2d8c29b6c599d8c1b008a226371a2
-
SHA512
804bb0c1c8871cf3f9c66dae9ad561adb4ced95b567e44a2874bac847e871deab7c6471aa4806361a9e1395b70ca0affa3a49248c22b017651cec7b7f7cfa593
-
SSDEEP
12288:ap5awlAXrB7IvbkmCOg/5lXwaZEy5mvtcsBIlMj9rp:apYgjkmCXAaZEumvluI9d
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2380 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2380 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2380 vlc.exe Token: SeIncBasePriorityPrivilege 2380 vlc.exe -
Suspicious use of FindShellTrayWindow 30 IoCs
pid Process 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe 2380 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2380 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\3bnwbl3TR0BzBzyo.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2380