Analysis
- max time kernel
149s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
19/06/2026, 22:48
General
- Target EYE OF RAH MEME COMPILATION (1).mp4
- Size 9.4MB
- Sample260619-2rlhesc161
- SHA256 213baa11bcc782741fdff6354c5107645f1916a70ee1e80f2f777c7ce4c15d45
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 20 IoCs
- Suspicious use of SendNotifyMessage 4 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\EYE OF RAH MEME COMPILATION (1).mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1632-0-0x00007FFCCBA7D000-0x00007FFCCBA7F000-memory.dmp
memory/1632-1-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-2-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-3-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-4-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-6-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-7-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-5-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-8-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-9-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-10-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-11-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-12-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-13-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-15-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-14-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-17-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-16-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-18-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-21-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-20-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-22-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-19-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-24-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-23-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-29-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-30-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-31-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-32-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-33-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-35-0x00007FFCE5160000-0x00007FFCE5194000-memory.dmp
memory/1632-34-0x00007FF69CAA0000-0x00007FF69CB98000-memory.dmp
memory/1632-36-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-40-0x00007FFCE18B0000-0x00007FFCE18DB000-memory.dmp
memory/1632-39-0x00007FFCE2EE0000-0x00007FFCE2F02000-memory.dmp
memory/1632-38-0x00007FFCE6420000-0x00007FFCE6439000-memory.dmp
memory/1632-37-0x00007FFCE6AE0000-0x00007FFCE6AF1000-memory.dmp
memory/1632-43-0x00007FFCE1870000-0x00007FFCE1881000-memory.dmp
memory/1632-41-0x00007FFCCAA60000-0x00007FFCCADF0000-memory.dmp
memory/1632-44-0x00007FFCE1790000-0x00007FFCE1862000-memory.dmp
memory/1632-42-0x00007FFCE1890000-0x00007FFCE18A4000-memory.dmp
memory/1632-45-0x00007FFCCA7C0000-0x00007FFCCAA56000-memory.dmp
memory/1632-48-0x00007FFCE1740000-0x00007FFCE1781000-memory.dmp
memory/1632-46-0x00007FFCCD920000-0x00007FFCCDA08000-memory.dmp
memory/1632-55-0x00007FFCD69E0000-0x00007FFCD69F1000-memory.dmp
memory/1632-59-0x00007FFCD5E10000-0x00007FFCD5E35000-memory.dmp
memory/1632-58-0x00007FFCD5E40000-0x00007FFCD5E8F000-memory.dmp
memory/1632-57-0x00007FFCD6940000-0x00007FFCD69D8000-memory.dmp
memory/1632-54-0x00007FFCD7DC0000-0x00007FFCD7DD1000-memory.dmp
memory/1632-62-0x0000027DE9370000-0x0000027DE9389000-memory.dmp
memory/1632-60-0x00007FFCCD870000-0x00007FFCCD91B000-memory.dmp
memory/1632-63-0x00007FFCC4290000-0x00007FFCC44D5000-memory.dmp
memory/1632-61-0x00007FFCD5DF0000-0x00007FFCD5E0B000-memory.dmp
memory/1632-64-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-65-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-56-0x00007FFCCA5B0000-0x00007FFCCA7BB000-memory.dmp
memory/1632-53-0x00007FFCDC130000-0x00007FFCDC14A000-memory.dmp
memory/1632-52-0x00007FFCDDAD0000-0x00007FFCDDAFD000-memory.dmp
memory/1632-51-0x00007FFCDEEA0000-0x00007FFCDEEC6000-memory.dmp
memory/1632-50-0x00007FFCDEED0000-0x00007FFCDEEE8000-memory.dmp
memory/1632-47-0x00007FFCCB6E0000-0x00007FFCCB7C3000-memory.dmp
memory/1632-49-0x00007FFCDEEF0000-0x00007FFCDEF1F000-memory.dmp
memory/1632-66-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-67-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-70-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-100-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-130-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-160-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-190-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-220-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-250-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-280-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-310-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-340-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-400-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp
memory/1632-430-0x00007FFCCB7D0000-0x00007FFCCBA86000-memory.dmp