Analysis
- max time kernel
148s - max time network
153s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
20/04/2026, 16:36
General
- Target assets/minecraft/sounds/dig/grass2.ogg
- Size 4KB
- Sample260420-t384vsay5l
- SHA256 55800a8e76ba04e2e7bc01785d86cf6ef1c3be1687f55576894faf16bd0f14f0
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 1 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 3 IoCs
- Suspicious use of SendNotifyMessage 2 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\assets\minecraft\sounds\dig\grass2.ogg1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\assets\minecraft\sounds\dig\grass2.ogg"2⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4472-0-0x00007FFBB363D000-0x00007FFBB363F000-memory.dmp
memory/4472-1-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-2-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-3-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-4-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-5-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-6-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-7-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-8-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-9-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-10-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-11-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-12-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-13-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-14-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-15-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-16-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-17-0x00007FFBB3390000-0x00007FFBB3646000-memory.dmp
memory/4472-19-0x00007FFBB3BF0000-0x00007FFBB3C24000-memory.dmp
memory/4472-23-0x00007FFBB68C0000-0x00007FFBB68D9000-memory.dmp
memory/4472-25-0x00007FFBB3100000-0x00007FFBB312B000-memory.dmp
memory/4472-22-0x00007FFBB78D0000-0x00007FFBB78E1000-memory.dmp
memory/4472-24-0x00007FFBB3130000-0x00007FFBB3152000-memory.dmp
memory/4472-28-0x00007FFBB6660000-0x00007FFBB6671000-memory.dmp
memory/4472-26-0x00007FFBA3870000-0x00007FFBA3C00000-memory.dmp
memory/4472-40-0x00007FFBB2D60000-0x00007FFBB2D71000-memory.dmp
memory/4472-39-0x00007FFBB3000000-0x00007FFBB3011000-memory.dmp
memory/4472-38-0x00007FFBB3A30000-0x00007FFBB3A4A000-memory.dmp
memory/4472-44-0x00007FFBA9D00000-0x00007FFBA9D25000-memory.dmp
memory/4472-43-0x00007FFBAAE20000-0x00007FFBAAE6F000-memory.dmp
memory/4472-42-0x00007FFBA9BF0000-0x00007FFBA9C88000-memory.dmp
memory/4472-30-0x00007FFBA35D0000-0x00007FFBA3866000-memory.dmp
memory/4472-41-0x00007FFBA33C0000-0x00007FFBA35CB000-memory.dmp
memory/4472-45-0x00007FFB9C420000-0x00007FFB9C665000-memory.dmp
memory/4472-37-0x00007FFBB2860000-0x00007FFBB288D000-memory.dmp
memory/4472-36-0x00007FFBB2890000-0x00007FFBB28B6000-memory.dmp
memory/4472-35-0x00007FFBB3B30000-0x00007FFBB3B48000-memory.dmp
memory/4472-34-0x00007FFBB2D80000-0x00007FFBB2DAF000-memory.dmp
memory/4472-33-0x00007FFBB2DB0000-0x00007FFBB2DF1000-memory.dmp
memory/4472-32-0x00007FFBB28C0000-0x00007FFBB29A3000-memory.dmp
memory/4472-31-0x00007FFBB2E00000-0x00007FFBB2EE8000-memory.dmp
memory/4472-29-0x00007FFBB3020000-0x00007FFBB30F2000-memory.dmp
memory/4472-27-0x00007FFBB6730000-0x00007FFBB6744000-memory.dmp
memory/4472-21-0x00000203E75F0000-0x00000203E75FC000-memory.dmp
memory/4472-18-0x00007FF614EB0000-0x00007FF614FA8000-memory.dmp