Resubmissions

23/06/2026, 22:38

260623-2kca6sgy3w6

23/06/2026, 22:29

260623-2eqxdagx916

23/06/2026, 22:29

260623-2d8e2agx4r1

Analysis

  • geolocation tags

    cacanadananorth-americatoronto
  • max time kernel
    899s
  • max time network
    510s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260618-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/06/2026, 22:29

General

  • Target
    MALIBU-bass-Eb major-112bpm-448hz - Part_1 - Part_1.wav
  • Size 277KB
  • Sample260623-2eqxdagx91
  • SHA256 a21671259bce3e92a3f8f09c5e3785008c17f71122dd2aad372673d17da43776
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\MALIBU-bass-Eb major-112bpm-448hz - Part_1 - Part_1.wav"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:6700
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:6212
    • C:\Windows\System32\SecurityHealthHost.exe
      \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
      1⤵
        PID:2380

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            memory/6700-0-0x00007FF9A014D000-0x00007FF9A014F000-memory.dmp

            memory/6700-1-0x00007FF99FEA0000-0x00007FF9A0156000-memory.dmp

            memory/6700-2-0x00007FF99FEA0000-0x00007FF9A0156000-memory.dmp

            memory/6700-7-0x00007FF99FEA0000-0x00007FF9A0156000-memory.dmp

            memory/6700-8-0x00007FF6DE060000-0x00007FF6DE158000-memory.dmp

            memory/6700-9-0x00007FF9BAD90000-0x00007FF9BADC4000-memory.dmp

            memory/6700-14-0x00007FF9BA730000-0x00007FF9BA747000-memory.dmp

            memory/6700-17-0x00007FF9BA6D0000-0x00007FF9BA6E1000-memory.dmp

            memory/6700-25-0x00007FF9B3DA0000-0x00007FF9B3DBB000-memory.dmp

            memory/6700-18-0x00007FF99FA40000-0x00007FF99FC4B000-memory.dmp

            memory/6700-28-0x00007FF9B17E0000-0x00007FF9B1810000-memory.dmp

            memory/6700-27-0x00007FF9B1A90000-0x00007FF9B1AA8000-memory.dmp

            memory/6700-26-0x00007FF9B2B30000-0x00007FF9B2B41000-memory.dmp

            memory/6700-24-0x00007FF9B3E60000-0x00007FF9B3E71000-memory.dmp

            memory/6700-23-0x00007FF9B40A0000-0x00007FF9B40B1000-memory.dmp

            memory/6700-30-0x00007FF9AB740000-0x00007FF9AB7A7000-memory.dmp

            memory/6700-32-0x00007FF9B1120000-0x00007FF9B1131000-memory.dmp

            memory/6700-33-0x00007FF9A90B0000-0x00007FF9A9107000-memory.dmp

            memory/6700-31-0x00007FF9A89F0000-0x00007FF9A8A6C000-memory.dmp

            memory/6700-22-0x00007FF9B8470000-0x00007FF9B8481000-memory.dmp

            memory/6700-21-0x00007FF9BA6B0000-0x00007FF9BA6C8000-memory.dmp

            memory/6700-20-0x00007FF9B8600000-0x00007FF9B8621000-memory.dmp

            memory/6700-19-0x00007FF9B6DB0000-0x00007FF9B6DF1000-memory.dmp

            memory/6700-16-0x00007FF9BA6F0000-0x00007FF9BA70D000-memory.dmp

            memory/6700-15-0x00007FF9BA710000-0x00007FF9BA721000-memory.dmp

            memory/6700-13-0x00007FF9BA750000-0x00007FF9BA761000-memory.dmp

            memory/6700-12-0x00007FF9BAC20000-0x00007FF9BAC37000-memory.dmp

            memory/6700-11-0x00007FF9BAD70000-0x00007FF9BAD88000-memory.dmp

            memory/6700-29-0x000001D452550000-0x000001D453600000-memory.dmp

            memory/6700-81-0x000001D452550000-0x000001D453600000-memory.dmp

            memory/6700-185-0x000001D452550000-0x000001D453600000-memory.dmp

            memory/6700-211-0x000001D452550000-0x000001D453600000-memory.dmp

            memory/6700-237-0x000001D452550000-0x000001D453600000-memory.dmp

            memory/6700-263-0x000001D452550000-0x000001D453600000-memory.dmp