Resubmissions
11/05/2026, 17:21
260511-vxfe2afw5z511/05/2026, 17:10
260511-vpp99say4m511/05/2026, 16:45
260511-t9cz1aez6s5Analysis
- max time kernel
298s - max time network
206s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260126-es - resource tags
- submitted
11/05/2026, 17:10
General
- Target libvlccore.dll
- Size 38.2MB
- Sample260511-vpp99say4m
- SHA256 4b66745f3fc4e118ae198f6b0152915a72be9c9d9b5a75bf8a2779d041574ff1
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Program crash 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\libvlccore.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\libvlccore.dll,#12⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4404 -s 6323⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4404 -ip 44041⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4404-0-0x0000000002A40000-0x0000000002A98000-memory.dmp
memory/4404-1-0x000000007F890000-0x000000007F891000-memory.dmp
memory/4404-4-0x000000007F890000-0x000000007F891000-memory.dmp
memory/4404-15-0x000000007F890000-0x000000007F891000-memory.dmp
memory/4404-11-0x000000007F890000-0x000000007F891000-memory.dmp
memory/4404-9-0x000000007F890000-0x000000007F891000-memory.dmp
memory/4404-7-0x000000007F890000-0x000000007F891000-memory.dmp
memory/4404-6-0x000000007F890000-0x000000007F891000-memory.dmp
memory/4404-23-0x000000007F890000-0x000000007F891000-memory.dmp
memory/4404-599-0x000000007F890000-0x000000007F891000-memory.dmp
memory/4404-597-0x0000000001080000-0x0000000001099000-memory.dmp
memory/4404-866-0x00000000029A0000-0x00000000029FF000-memory.dmp
memory/4404-1044-0x000000007FA20000-0x000000007FA25000-memory.dmp
memory/4404-1049-0x00000000039D0000-0x00000000039D1000-memory.dmp
memory/4404-1050-0x00000000039D0000-0x00000000039D1000-memory.dmp
memory/4404-1051-0x00000000039E0000-0x00000000039E1000-memory.dmp
memory/4404-1052-0x00000000039E0000-0x00000000039E1000-memory.dmp
memory/4404-1053-0x00000000039F0000-0x00000000039F1000-memory.dmp
memory/4404-1054-0x00000000039F0000-0x00000000039F1000-memory.dmp
memory/4404-1059-0x0000000003A30000-0x0000000003A31000-memory.dmp
memory/4404-1060-0x0000000003A30000-0x0000000003A31000-memory.dmp
memory/4404-1058-0x0000000003A20000-0x0000000003A21000-memory.dmp
memory/4404-1057-0x0000000003A20000-0x0000000003A21000-memory.dmp
memory/4404-1056-0x0000000003A00000-0x0000000003A01000-memory.dmp
memory/4404-1055-0x0000000003A00000-0x0000000003A01000-memory.dmp
memory/4404-1061-0x0000000003A40000-0x0000000003A41000-memory.dmp
memory/4404-1062-0x0000000003A40000-0x0000000003A41000-memory.dmp
memory/4404-1086-0x0000000003B00000-0x0000000003B01000-memory.dmp
memory/4404-1085-0x0000000003B00000-0x0000000003B01000-memory.dmp
memory/4404-1084-0x0000000003AF0000-0x0000000003AF1000-memory.dmp
memory/4404-1087-0x0000000003B10000-0x0000000003B11000-memory.dmp
memory/4404-1083-0x0000000003AF0000-0x0000000003AF1000-memory.dmp
memory/4404-1082-0x0000000003AE0000-0x0000000003AE1000-memory.dmp
memory/4404-1081-0x0000000003AE0000-0x0000000003AE1000-memory.dmp
memory/4404-1080-0x0000000003AD0000-0x0000000003AD1000-memory.dmp
memory/4404-1079-0x0000000003AD0000-0x0000000003AD1000-memory.dmp
memory/4404-1078-0x0000000003AC0000-0x0000000003AC1000-memory.dmp
memory/4404-1077-0x0000000003AC0000-0x0000000003AC1000-memory.dmp
memory/4404-1076-0x0000000003AB0000-0x0000000003AB1000-memory.dmp
memory/4404-1075-0x0000000003AB0000-0x0000000003AB1000-memory.dmp
memory/4404-1088-0x0000000003B10000-0x0000000003B11000-memory.dmp
memory/4404-1074-0x0000000003AA0000-0x0000000003AA1000-memory.dmp
memory/4404-1073-0x0000000003AA0000-0x0000000003AA1000-memory.dmp
memory/4404-1072-0x0000000003A90000-0x0000000003A91000-memory.dmp
memory/4404-1071-0x0000000003A90000-0x0000000003A91000-memory.dmp
memory/4404-1070-0x0000000003A80000-0x0000000003A81000-memory.dmp
memory/4404-1069-0x0000000003A80000-0x0000000003A81000-memory.dmp
memory/4404-1089-0x0000000003B20000-0x0000000003B21000-memory.dmp
memory/4404-1068-0x0000000003A70000-0x0000000003A71000-memory.dmp
memory/4404-1067-0x0000000003A70000-0x0000000003A71000-memory.dmp
memory/4404-1066-0x0000000003A60000-0x0000000003A61000-memory.dmp
memory/4404-1065-0x0000000003A60000-0x0000000003A61000-memory.dmp
memory/4404-1064-0x0000000003A50000-0x0000000003A51000-memory.dmp
memory/4404-1063-0x0000000003A50000-0x0000000003A51000-memory.dmp
memory/4404-1090-0x0000000003B20000-0x0000000003B21000-memory.dmp
memory/4404-1091-0x0000000003B30000-0x0000000003B31000-memory.dmp
memory/4404-1092-0x0000000003B30000-0x0000000003B31000-memory.dmp
memory/4404-1093-0x0000000003B40000-0x0000000003B41000-memory.dmp
memory/4404-1094-0x0000000003B40000-0x0000000003B41000-memory.dmp
memory/4404-1095-0x0000000003B50000-0x0000000003B51000-memory.dmp
memory/4404-1096-0x0000000003B50000-0x0000000003B51000-memory.dmp
memory/4404-1097-0x0000000003B60000-0x0000000003B61000-memory.dmp
memory/4404-1098-0x0000000003B60000-0x0000000003B61000-memory.dmp
memory/4404-1099-0x0000000003B70000-0x0000000003B71000-memory.dmp
memory/4404-1100-0x0000000003B70000-0x0000000003B71000-memory.dmp
memory/4404-1514-0x0000000002A40000-0x0000000002A98000-memory.dmp
memory/4404-1633-0x0000000002A40000-0x0000000002A98000-memory.dmp
memory/4404-1655-0x0000000002A40000-0x0000000002A98000-memory.dmp
memory/4404-1587-0x0000000002A40000-0x0000000002A98000-memory.dmp
memory/4404-1559-0x0000000002A40000-0x0000000002A98000-memory.dmp
memory/4404-1544-0x0000000002A40000-0x0000000002A98000-memory.dmp
memory/4404-2116-0x0000000002A40000-0x0000000002A98000-memory.dmp
memory/4404-1496-0x0000000002A40000-0x0000000002A98000-memory.dmp
memory/4404-1480-0x0000000002A40000-0x0000000002A98000-memory.dmp
memory/4404-1458-0x0000000002A40000-0x0000000002A98000-memory.dmp
memory/4404-1434-0x0000000002A40000-0x0000000002A98000-memory.dmp
memory/4404-1344-0x0000000002A40000-0x0000000002A98000-memory.dmp
memory/4404-1307-0x0000000002A40000-0x0000000002A98000-memory.dmp
memory/4404-1285-0x0000000002A40000-0x0000000002A98000-memory.dmp