Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/04/2026, 18:29
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
VLC.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
VLC.exe
Resource
win11-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
libvlc.dll
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
libvlc.dll
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target libvlc.dll
- Size 1.7MB
- Sample260420-w487cses7v
- SHA256 123a25150ab851b3c449d8c074f82c63ed987126ec50614c04ab2fd15fb19503
- MD5 57740338bad6ceb8e6f8c9fb67b8dc82
- SHA1 848d0e4e207fa12af304240f7cb0bdee1ce0f9a6
- SHA512 c08512963c5768f751328b1c563fac915a2659924ccf666f2f1c727dc148770559c1a0ab952b2343a86d5b10cada99d408279e6f19d86d43e334c7d5036a7a21
- SSDEEP 24576:+xFI6yAgakwJAEDD4ph47ghzsRIPl+6F7R+m0lxyJSfRJIYDlvjwQUYrpJ:UI6/gqB8hQOt+6F7RBSgypcQUSJ
- TLSH T1A1859E16FBA800B5E0F79279C9638A46D2757C49437097DF13A41A9B2F37AD08E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 1 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 4 4048 rundll32.exe - Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 3 ip-api.com