Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05-01-2025 20:58

General

  • Target

    youtube_gh9lfOdCjAA_audio (2) (4).mp3

  • Size

    579KB

  • MD5

    36e09440b78e3d3eb2030ab6afcb0e61

  • SHA1

    b6fa8f88c98ef55cf5977643b313f27c954fd2ed

  • SHA256

    a3c5117ed4b12ed1a1752fdc2cf01f7f10a5b305e77a1db0dde061c6df45477e

  • SHA512

    dc65a17daa7a8064e8d529f03ee228b292e6a632536d5a34e286df0a7d470eace66cab24717398cf0c125bee2ea48aa29e746648e4c75a4f6113c52eea448872

  • SSDEEP

    12288:OGgmVUJGKsaCMuKloXcmcExRH3FbezoJXK3eRsAr0c2PeJqDG3aydRbMv:O5oMDlGcmcExRH3FbeyXKOdpENqbU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\youtube_gh9lfOdCjAA_audio (2) (4).mp3"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2168-5-0x000000013FDD0000-0x000000013FEC8000-memory.dmp

    Filesize

    992KB

  • memory/2168-6-0x000007FEF7810000-0x000007FEF7844000-memory.dmp

    Filesize

    208KB

  • memory/2168-10-0x000007FEFA700000-0x000007FEFA711000-memory.dmp

    Filesize

    68KB

  • memory/2168-14-0x000007FEF69D0000-0x000007FEF69E1000-memory.dmp

    Filesize

    68KB

  • memory/2168-13-0x000007FEF69F0000-0x000007FEF6A0D000-memory.dmp

    Filesize

    116KB

  • memory/2168-12-0x000007FEF6A10000-0x000007FEF6A21000-memory.dmp

    Filesize

    68KB

  • memory/2168-11-0x000007FEF6A30000-0x000007FEF6A47000-memory.dmp

    Filesize

    92KB

  • memory/2168-7-0x000007FEF7550000-0x000007FEF7806000-memory.dmp

    Filesize

    2.7MB

  • memory/2168-9-0x000007FEFA750000-0x000007FEFA767000-memory.dmp

    Filesize

    92KB

  • memory/2168-8-0x000007FEFB3C0000-0x000007FEFB3D8000-memory.dmp

    Filesize

    96KB

  • memory/2168-25-0x000007FEF6190000-0x000007FEF61A8000-memory.dmp

    Filesize

    96KB

  • memory/2168-32-0x000007FEF4980000-0x000007FEF49D7000-memory.dmp

    Filesize

    348KB

  • memory/2168-35-0x000007FEF4910000-0x000007FEF4921000-memory.dmp

    Filesize

    68KB

  • memory/2168-36-0x000007FEF4840000-0x000007FEF4905000-memory.dmp

    Filesize

    788KB

  • memory/2168-41-0x000007FEF2960000-0x000007FEF2972000-memory.dmp

    Filesize

    72KB

  • memory/2168-40-0x000007FEF2980000-0x000007FEF2991000-memory.dmp

    Filesize

    68KB

  • memory/2168-39-0x000007FEF29C0000-0x000007FEF29D5000-memory.dmp

    Filesize

    84KB

  • memory/2168-38-0x000007FEF2B90000-0x000007FEF2BB8000-memory.dmp

    Filesize

    160KB

  • memory/2168-37-0x000007FEF2BC0000-0x000007FEF2C17000-memory.dmp

    Filesize

    348KB

  • memory/2168-15-0x000007FEF4D70000-0x000007FEF5E20000-memory.dmp

    Filesize

    16.7MB

  • memory/2168-34-0x000007FEF4930000-0x000007FEF4943000-memory.dmp

    Filesize

    76KB

  • memory/2168-33-0x000007FEF4950000-0x000007FEF497F000-memory.dmp

    Filesize

    188KB

  • memory/2168-31-0x000007FEF49E0000-0x000007FEF49F1000-memory.dmp

    Filesize

    68KB

  • memory/2168-30-0x000007FEF4A00000-0x000007FEF4A18000-memory.dmp

    Filesize

    96KB

  • memory/2168-29-0x000007FEF4A20000-0x000007FEF4A31000-memory.dmp

    Filesize

    68KB

  • memory/2168-28-0x000007FEF4A40000-0x000007FEF4ABC000-memory.dmp

    Filesize

    496KB

  • memory/2168-27-0x000007FEF4AC0000-0x000007FEF4B27000-memory.dmp

    Filesize

    412KB

  • memory/2168-26-0x000007FEF4B30000-0x000007FEF4B60000-memory.dmp

    Filesize

    192KB

  • memory/2168-24-0x000007FEF61B0000-0x000007FEF61C1000-memory.dmp

    Filesize

    68KB

  • memory/2168-23-0x000007FEF61D0000-0x000007FEF61EB000-memory.dmp

    Filesize

    108KB

  • memory/2168-22-0x000007FEF61F0000-0x000007FEF6201000-memory.dmp

    Filesize

    68KB

  • memory/2168-21-0x000007FEF6210000-0x000007FEF6221000-memory.dmp

    Filesize

    68KB

  • memory/2168-20-0x000007FEF6230000-0x000007FEF6241000-memory.dmp

    Filesize

    68KB

  • memory/2168-19-0x000007FEF6250000-0x000007FEF6268000-memory.dmp

    Filesize

    96KB

  • memory/2168-18-0x000007FEF6270000-0x000007FEF6291000-memory.dmp

    Filesize

    132KB

  • memory/2168-17-0x000007FEF64A0000-0x000007FEF64E1000-memory.dmp

    Filesize

    260KB

  • memory/2168-16-0x000007FEF4B60000-0x000007FEF4D6B000-memory.dmp

    Filesize

    2.0MB

  • memory/2168-42-0x000007FEF27E0000-0x000007FEF295A000-memory.dmp

    Filesize

    1.5MB