Analysis
- user interaction
yes - max time kernel
899s - max time network
490s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260130-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
11/05/2026, 14:37
Static task
static1
Behavioral task
behavioral1
Sample
1261905.mp4
Resource
win10ltsc2021-20260130-en
5 signatures
900 seconds
General
- Target 1261905.mp4
- Size 117.4MB
- Sample260511-ry8lescw2t
- SHA256 7d89fc58655c63f1be62dac6871bd6823f9d1897443bbd4adf016f423370316c
- MD5 dcd697215ee2d1326b72f9c01c33f1ee
- SHA1 9c68d7efd174c7c50690539add5afd64a23cf1d4
- SHA512 ebf3388be2c532e8920bf228614a7e1e0b0e9ef397c26cc0b0d7e54eba5c01f1653e88fdcc2798761d053ac63afd0010a1d14641a8f82188b72a6c0240ede7bf
- SSDEEP 3145728:rg62O5YqnNXYDUI50Y9TVLm1IDUNG0XGBhJbhoh4:cGYqpYL0Y9hLmXNGbqq
- TLSH T1954833587B9D3267C6259373D2C217143E34D468231B639B4292A3BAECA23F0DD53DE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4688 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4688 vlc.exe - Suspicious use of FindShellTrayWindow 20 IoCs
pid Process 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe - Suspicious use of SendNotifyMessage 4 IoCs
pid Process 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe 4688 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\1261905.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4688