Analysis
- max time kernel
148s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
20/04/2026, 16:36
General
- Target assets/minecraft/sounds/dig/gravel1.ogg
- Size 5KB
- Sample260420-t384vsay5l
- SHA256 be92a8140b8aab717e23a7979a646a8daabd598ccdbb08949e0cf78069289361
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 1 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\assets\minecraft\sounds\dig\gravel1.ogg1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\assets\minecraft\sounds\dig\gravel1.ogg"2⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/6072-0-0x00007FF8348FD000-0x00007FF8348FF000-memory.dmp
memory/6072-1-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-2-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-3-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-4-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-5-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-6-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-7-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-8-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-9-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-10-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-11-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-12-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-13-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-14-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-15-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-20-0x00007FF834650000-0x00007FF834906000-memory.dmp
memory/6072-21-0x00007FF61DD10000-0x00007FF61DE08000-memory.dmp
memory/6072-26-0x00007FF83F390000-0x00007FF83F3A9000-memory.dmp
memory/6072-24-0x000001BB99270000-0x000001BB9927C000-memory.dmp
memory/6072-28-0x00007FF834E90000-0x00007FF834EBB000-memory.dmp
memory/6072-22-0x00007FF83EE90000-0x00007FF83EEC4000-memory.dmp
memory/6072-25-0x00007FF83FC10000-0x00007FF83FC21000-memory.dmp
memory/6072-27-0x00007FF835260000-0x00007FF835282000-memory.dmp
memory/6072-31-0x00007FF835170000-0x00007FF835181000-memory.dmp
memory/6072-34-0x00007FF834250000-0x00007FF834338000-memory.dmp
memory/6072-35-0x00007FF833FC0000-0x00007FF8340A3000-memory.dmp
memory/6072-43-0x00007FF82CC80000-0x00007FF82CC91000-memory.dmp
memory/6072-42-0x00007FF82DD70000-0x00007FF82DD81000-memory.dmp
memory/6072-45-0x00007FF82CB60000-0x00007FF82CBF8000-memory.dmp
memory/6072-48-0x00007FF820060000-0x00007FF8202A5000-memory.dmp
memory/6072-44-0x00007FF825FC0000-0x00007FF8261CB000-memory.dmp
memory/6072-47-0x00007FF82CAE0000-0x00007FF82CB05000-memory.dmp
memory/6072-46-0x00007FF82CB10000-0x00007FF82CB5F000-memory.dmp
memory/6072-41-0x00007FF82DD90000-0x00007FF82DDAA000-memory.dmp
memory/6072-40-0x00007FF82DDB0000-0x00007FF82DDDD000-memory.dmp
memory/6072-39-0x00007FF833F20000-0x00007FF833F46000-memory.dmp
memory/6072-38-0x00007FF833F50000-0x00007FF833F68000-memory.dmp
memory/6072-37-0x00007FF834E30000-0x00007FF834E5F000-memory.dmp
memory/6072-36-0x00007FF833F70000-0x00007FF833FB1000-memory.dmp
memory/6072-33-0x00007FF8261D0000-0x00007FF826466000-memory.dmp
memory/6072-29-0x00007FF826470000-0x00007FF826800000-memory.dmp
memory/6072-32-0x00007FF834340000-0x00007FF834412000-memory.dmp
memory/6072-30-0x00007FF835DE0000-0x00007FF835DF4000-memory.dmp