Analysis
- geolocation tags
- max time kernel
900s - max time network
487s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
- submitted
21/06/2026, 17:24
General
- Target screen_1774839742052.mp4
- Size 8.2MB
- Sample260621-vyyb8set5m
- SHA256 4802e53a15b7b79376a2c5923f307730e284e5da3705ecbced7e2c5157838566
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 25 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\screen_1774839742052.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3012-0-0x00007FFBA67AD000-0x00007FFBA67AF000-memory.dmp
memory/3012-1-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-2-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-3-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-4-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-9-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-10-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-11-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-12-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-13-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-14-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-15-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-16-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-17-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-18-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-19-0x00007FF639500000-0x00007FF6395F8000-memory.dmp
memory/3012-26-0x00007FFBBD2C0000-0x00007FFBBD2D1000-memory.dmp
memory/3012-29-0x00007FFBA60A0000-0x00007FFBA62AB000-memory.dmp
memory/3012-30-0x00007FFBBD230000-0x00007FFBBD271000-memory.dmp
memory/3012-34-0x00007FFBBD1C0000-0x00007FFBBD1D1000-memory.dmp
memory/3012-41-0x00007FFBB1590000-0x00007FFBB15F7000-memory.dmp
memory/3012-42-0x00007FFBB1510000-0x00007FFBB158C000-memory.dmp
memory/3012-31-0x000001F100A00000-0x000001F101AB0000-memory.dmp
memory/3012-45-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-44-0x00007FFBB14B0000-0x00007FFBB1507000-memory.dmp
memory/3012-43-0x00007FFBB9BF0000-0x00007FFBB9C01000-memory.dmp
memory/3012-40-0x00007FFBB9C10000-0x00007FFBB9C40000-memory.dmp
memory/3012-39-0x00007FFBB9C40000-0x00007FFBB9C58000-memory.dmp
memory/3012-38-0x00007FFBB9C60000-0x00007FFBB9C71000-memory.dmp
memory/3012-37-0x00007FFBBD160000-0x00007FFBBD17B000-memory.dmp
memory/3012-36-0x00007FFBBD180000-0x00007FFBBD191000-memory.dmp
memory/3012-35-0x00007FFBBD1A0000-0x00007FFBBD1B1000-memory.dmp
memory/3012-33-0x00007FFBBD1E0000-0x00007FFBBD1F8000-memory.dmp
memory/3012-32-0x00007FFBBD200000-0x00007FFBBD221000-memory.dmp
memory/3012-21-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-28-0x00007FFBBD280000-0x00007FFBBD291000-memory.dmp
memory/3012-27-0x00007FFBBD2A0000-0x00007FFBBD2BD000-memory.dmp
memory/3012-25-0x00007FFBBD2E0000-0x00007FFBBD2F7000-memory.dmp
memory/3012-24-0x00007FFBBEB70000-0x00007FFBBEB81000-memory.dmp
memory/3012-23-0x00007FFBC2BF0000-0x00007FFBC2C07000-memory.dmp
memory/3012-22-0x00007FFBC2C30000-0x00007FFBC2C48000-memory.dmp
memory/3012-20-0x00007FFBC0C00000-0x00007FFBC0C34000-memory.dmp
memory/3012-48-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-58-0x000001F100A00000-0x000001F101AB0000-memory.dmp
memory/3012-74-0x00007FFBA6500000-0x00007FFBA67B6000-memory.dmp
memory/3012-84-0x000001F100A00000-0x000001F101AB0000-memory.dmp
memory/3012-110-0x000001F100A00000-0x000001F101AB0000-memory.dmp
memory/3012-188-0x000001F100A00000-0x000001F101AB0000-memory.dmp
memory/3012-214-0x000001F100A00000-0x000001F101AB0000-memory.dmp
memory/3012-240-0x000001F100A00000-0x000001F101AB0000-memory.dmp
memory/3012-266-0x000001F100A00000-0x000001F101AB0000-memory.dmp