Analysis
- max time kernel
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/06/2026, 03:51
Static task
static1
Behavioral task
behavioral1
Sample
Iron.Lung.2026.1080P.10bit.Web-Dl.English.Esubs.MoviesMod.money.mkv
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Iron.Lung.2026.1080P.10bit.Web-Dl.English.Esubs.MoviesMod.money.mkv
Resource
win11ltsc2024-20260618-en
5 signatures
150 seconds
General
- Target Iron.Lung.2026.1080P.10bit.Web-Dl.English.Esubs.MoviesMod.money.mkv
- Size 912.1MB
- Sample260624-eeta6sh14r
- SHA256 d17dbea5ba669121885997190da1d3e7e62484e2a0d4518825efe2ce7a6aa31b
- MD5 e860778ddde443234427727c0f8a229a
- SHA1 ff25db4081f79b4889b4acb6b47f0a5f67dc705e
- SHA512 45160f6cae5090280c49f080911a34425fb65f9c22e23121078d5198c784d05d5e097737bbdab05203facabad8fd75e8715075f8f15d016e93061c89b4f6a82a
- SSDEEP 25165824:cv7bxklAj7dg4H1EObd79j3wd1Gd3CX9cN:6SAl1D9jAdR9y
- TLSH T1EBA93392F799F00ACD911A3267850B4FD122BB674C95CB83166D6ECA7C831881FFF196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1340 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1340 vlc.exe - Suspicious use of FindShellTrayWindow 21 IoCs
pid Process 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe - Suspicious use of SendNotifyMessage 5 IoCs
pid Process 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe 1340 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Iron.Lung.2026.1080P.10bit.Web-Dl.English.Esubs.MoviesMod.money.mkv"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1340