Analysis
- max time kernel
46s - max time network
35s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
23/06/2026, 15:21
Static task
static1
Behavioral task
behavioral1
Sample
67907ab5357bfade63d120fcdb869ed2.mp4
Resource
win10ltsc2021-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
67907ab5357bfade63d120fcdb869ed2.mp4
Resource
win10v2004-20260513-en
8 signatures
150 seconds
General
- Target 67907ab5357bfade63d120fcdb869ed2.mp4
- Size 3.7MB
- Sample260623-srcqvady6m
- SHA256 ed75e557fbfd07e006885051cebca24e65318a367cdce4a6c4b6f122e01ea1d6
- MD5 1872303ec4fd0dc6491b30b3f99d8cef
- SHA1 b01339796fab844371632aa3406d8756ea4d1672
- SHA512 39098dfdbd49cccb3a6ddcbc1b4131ea07b3e93bdddbfe4398d54e2fd2e4e3286e0a0ee34238404a48437cf4f257b3a4b24a874d0681ca7e465a8ed4b82f2eff
- SSDEEP 98304:8ekzHU1z4998aDkyUMj/6Vh4gEHgPvARiKbxsr8qGLzSVm4AMhr:D1z+9dDkyUMj/8REHg3AwusQjv4m4Dr
- TLSH T1B1063319AB52A817E32CF23CA9D44314F7F0C5A0E747D38F53655A340EBAA851D2FAE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4144 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4144 vlc.exe - Suspicious use of FindShellTrayWindow 24 IoCs
pid Process 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe 4144 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\67907ab5357bfade63d120fcdb869ed2.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4144