Resubmissions

08/01/2025, 10:41

250108-mrhn7swpb1 6

08/01/2025, 09:59

250108-l1h6naxmfq 10

Analysis

  • max time kernel
    140s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    08/01/2025, 10:41

General

  • Target

    lighthouse_teslacrypt_ransomware.mp4

  • Size

    3.1MB

  • MD5

    577c4a77455c945bf638349a16aa9b47

  • SHA1

    ff9139369ebf187e64c86348132dfb5f20bd4ac9

  • SHA256

    c7503cdbc638d4886e9b06942b9afc345f041663734963b49fb25e1577287c46

  • SHA512

    64a5510ca8c19915c9a88a524ca12731d2cb7b672d84f9db58c0aac7e39e1d89cf50981078dbcb905fd75f259124b9aee055e2d6fc95387023345c770313283c

  • SSDEEP

    49152:pHZUdEm4AOcOgifdrIstug5mBdNUQIAfe3o7DDeh+HAjADJEsgBUEG5o5OpaRWC3:pHZA74A9UfOCmHIRoDeCJDGVBvG5o5O0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 31 IoCs
  • Suspicious use of SendNotifyMessage 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\lighthouse_teslacrypt_ransomware.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1884-6-0x000007FEF7540000-0x000007FEF7574000-memory.dmp

    Filesize

    208KB

  • memory/1884-5-0x000000013F760000-0x000000013F858000-memory.dmp

    Filesize

    992KB

  • memory/1884-8-0x000007FEFB700000-0x000007FEFB718000-memory.dmp

    Filesize

    96KB

  • memory/1884-12-0x000007FEF66D0000-0x000007FEF66E1000-memory.dmp

    Filesize

    68KB

  • memory/1884-11-0x000007FEF6CE0000-0x000007FEF6CF7000-memory.dmp

    Filesize

    92KB

  • memory/1884-10-0x000007FEF6D40000-0x000007FEF6D51000-memory.dmp

    Filesize

    68KB

  • memory/1884-9-0x000007FEF6D60000-0x000007FEF6D77000-memory.dmp

    Filesize

    92KB

  • memory/1884-7-0x000007FEF7280000-0x000007FEF7536000-memory.dmp

    Filesize

    2.7MB

  • memory/1884-13-0x000007FEF66B0000-0x000007FEF66CD000-memory.dmp

    Filesize

    116KB

  • memory/1884-14-0x000007FEF6690000-0x000007FEF66A1000-memory.dmp

    Filesize

    68KB

  • memory/1884-16-0x000007FEF4FD0000-0x000007FEF51DB000-memory.dmp

    Filesize

    2.0MB

  • memory/1884-15-0x000007FEF51E0000-0x000007FEF6290000-memory.dmp

    Filesize

    16.7MB

  • memory/1884-19-0x000007FEF4F60000-0x000007FEF4F78000-memory.dmp

    Filesize

    96KB

  • memory/1884-18-0x000007FEF6660000-0x000007FEF6681000-memory.dmp

    Filesize

    132KB

  • memory/1884-17-0x000007FEF4F80000-0x000007FEF4FC1000-memory.dmp

    Filesize

    260KB

  • memory/1884-20-0x000007FEF4F40000-0x000007FEF4F51000-memory.dmp

    Filesize

    68KB

  • memory/1884-21-0x000007FEF4F20000-0x000007FEF4F31000-memory.dmp

    Filesize

    68KB

  • memory/1884-22-0x000007FEF4F00000-0x000007FEF4F11000-memory.dmp

    Filesize

    68KB

  • memory/1884-23-0x000007FEF4EE0000-0x000007FEF4EFB000-memory.dmp

    Filesize

    108KB

  • memory/1884-24-0x000007FEF4EC0000-0x000007FEF4ED1000-memory.dmp

    Filesize

    68KB

  • memory/1884-25-0x000007FEF4EA0000-0x000007FEF4EB8000-memory.dmp

    Filesize

    96KB

  • memory/1884-26-0x000007FEF4E70000-0x000007FEF4EA0000-memory.dmp

    Filesize

    192KB

  • memory/1884-27-0x000007FEF4E00000-0x000007FEF4E67000-memory.dmp

    Filesize

    412KB

  • memory/1884-28-0x000007FEF4D80000-0x000007FEF4DFC000-memory.dmp

    Filesize

    496KB

  • memory/1884-29-0x000007FEF4D60000-0x000007FEF4D71000-memory.dmp

    Filesize

    68KB

  • memory/1884-30-0x000007FEF4D00000-0x000007FEF4D57000-memory.dmp

    Filesize

    348KB

  • memory/1884-31-0x000007FEF4B80000-0x000007FEF4D00000-memory.dmp

    Filesize

    1.5MB

  • memory/1884-32-0x000007FEF4B60000-0x000007FEF4B77000-memory.dmp

    Filesize

    92KB

  • memory/1884-33-0x000007FEF32F0000-0x000007FEF4B5F000-memory.dmp

    Filesize

    24.4MB

  • memory/1884-42-0x000007FEF2B90000-0x000007FEF2BA6000-memory.dmp

    Filesize

    88KB

  • memory/1884-41-0x000007FEF2BB0000-0x000007FEF2BC1000-memory.dmp

    Filesize

    68KB

  • memory/1884-40-0x000007FEF2BD0000-0x000007FEF2BFF000-memory.dmp

    Filesize

    188KB

  • memory/1884-39-0x000007FEF6D20000-0x000007FEF6D30000-memory.dmp

    Filesize

    64KB

  • memory/1884-38-0x000007FEF2EB0000-0x000007FEF301B000-memory.dmp

    Filesize

    1.4MB

  • memory/1884-37-0x000007FEF3020000-0x000007FEF306D000-memory.dmp

    Filesize

    308KB

  • memory/1884-43-0x000007FEF2AC0000-0x000007FEF2B85000-memory.dmp

    Filesize

    788KB

  • memory/1884-36-0x000007FEF3070000-0x000007FEF30B2000-memory.dmp

    Filesize

    264KB

  • memory/1884-35-0x000007FEF30C0000-0x000007FEF30D2000-memory.dmp

    Filesize

    72KB

  • memory/1884-44-0x000007FEF2A70000-0x000007FEF2AB2000-memory.dmp

    Filesize

    264KB

  • memory/1884-34-0x000007FEF30E0000-0x000007FEF32E6000-memory.dmp

    Filesize

    2.0MB

  • memory/1884-45-0x000007FEF2A00000-0x000007FEF2A62000-memory.dmp

    Filesize

    392KB

  • memory/1884-46-0x000007FEF2990000-0x000007FEF29FD000-memory.dmp

    Filesize

    436KB

  • memory/1884-47-0x000007FEF2950000-0x000007FEF2964000-memory.dmp

    Filesize

    80KB

  • memory/1884-48-0x000007FEF2900000-0x000007FEF2950000-memory.dmp

    Filesize

    320KB

  • memory/1884-49-0x000007FEF28E0000-0x000007FEF28F5000-memory.dmp

    Filesize

    84KB

  • memory/1884-50-0x000007FEF25B0000-0x000007FEF2860000-memory.dmp

    Filesize

    2.7MB

  • memory/1884-51-0x000007FEF28A0000-0x000007FEF28B5000-memory.dmp

    Filesize

    84KB

  • memory/1884-52-0x000007FEF2580000-0x000007FEF25A3000-memory.dmp

    Filesize

    140KB

  • memory/1884-53-0x000007FEF2880000-0x000007FEF2893000-memory.dmp

    Filesize

    76KB

  • memory/1884-54-0x000007FEF2470000-0x000007FEF2576000-memory.dmp

    Filesize

    1.0MB

  • memory/1884-55-0x000007FEF2450000-0x000007FEF2461000-memory.dmp

    Filesize

    68KB

  • memory/1884-56-0x000007FEF2430000-0x000007FEF2442000-memory.dmp

    Filesize

    72KB

  • memory/1884-57-0x000007FEF2400000-0x000007FEF242A000-memory.dmp

    Filesize

    168KB

  • memory/1884-58-0x000007FEF2090000-0x000007FEF20A1000-memory.dmp

    Filesize

    68KB

  • memory/1884-59-0x000007FEF2020000-0x000007FEF2081000-memory.dmp

    Filesize

    388KB

  • memory/1884-60-0x000007FEF1FD0000-0x000007FEF2017000-memory.dmp

    Filesize

    284KB

  • memory/1884-61-0x000007FEF1F50000-0x000007FEF1FC4000-memory.dmp

    Filesize

    464KB

  • memory/1884-62-0x000007FEF1DD0000-0x000007FEF1DE1000-memory.dmp

    Filesize

    68KB

  • memory/1884-63-0x000007FEF1AE0000-0x000007FEF1B2E000-memory.dmp

    Filesize

    312KB

  • memory/1884-64-0x000007FEF1A80000-0x000007FEF1AD7000-memory.dmp

    Filesize

    348KB

  • memory/1884-65-0x000007FEF1A40000-0x000007FEF1A74000-memory.dmp

    Filesize

    208KB