Resubmissions

25/06/2026, 00:44

260625-a3klqagy8j6

25/06/2026, 00:22

260625-an6weagy6q6

Analysis

  • geolocation tags

    nanew-jerseynorth-americaunited-statesususa
  • max time kernel
    899s
  • max time network
    739s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260617-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    25/06/2026, 00:22

General

  • Target
    PARTYNEXTDOOR - RESENTMENT (Official Visualizer) 0-vocals-C major-94bpm-451hz - Part_1.wav
  • Size 220KB
  • Sample260625-an6weagy6q
  • SHA256 6c74fe71010461c403417d3c08f9633da75024b6af628a6a70bb742aa50520d9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\PARTYNEXTDOOR - RESENTMENT (Official Visualizer) 0-vocals-C major-94bpm-451hz - Part_1.wav"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:904
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:1896
    • C:\Windows\System32\SecurityHealthHost.exe
      \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
      1⤵
        PID:2580

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            memory/904-0-0x00007FFF36E2D000-0x00007FFF36E2F000-memory.dmp

            memory/904-1-0x00007FFF36B80000-0x00007FFF36E36000-memory.dmp

            memory/904-2-0x00007FFF36B80000-0x00007FFF36E36000-memory.dmp

            memory/904-3-0x00007FFF36B80000-0x00007FFF36E36000-memory.dmp

            memory/904-8-0x00007FFF36B80000-0x00007FFF36E36000-memory.dmp

            memory/904-9-0x00007FF712650000-0x00007FF712748000-memory.dmp

            memory/904-10-0x00007FFF4D510000-0x00007FFF4D544000-memory.dmp

            memory/904-15-0x00007FFF48B80000-0x00007FFF48B97000-memory.dmp

            memory/904-18-0x00007FFF48B20000-0x00007FFF48B31000-memory.dmp

            memory/904-17-0x00007FFF48B40000-0x00007FFF48B5D000-memory.dmp

            memory/904-19-0x00007FFF36520000-0x00007FFF3672B000-memory.dmp

            memory/904-30-0x00007FFF364B0000-0x00007FFF36517000-memory.dmp

            memory/904-29-0x00007FFF41BD0000-0x00007FFF41C00000-memory.dmp

            memory/904-28-0x00007FFF41C00000-0x00007FFF41C18000-memory.dmp

            memory/904-27-0x00007FFF41C20000-0x00007FFF41C31000-memory.dmp

            memory/904-26-0x00007FFF43790000-0x00007FFF437AB000-memory.dmp

            memory/904-25-0x00007FFF478B0000-0x00007FFF478C1000-memory.dmp

            memory/904-24-0x00007FFF47A80000-0x00007FFF47A91000-memory.dmp

            memory/904-23-0x00007FFF48A60000-0x00007FFF48A71000-memory.dmp

            memory/904-22-0x00007FFF48A80000-0x00007FFF48A98000-memory.dmp

            memory/904-21-0x00007FFF48AA0000-0x00007FFF48AC1000-memory.dmp

            memory/904-20-0x00007FFF48AD0000-0x00007FFF48B11000-memory.dmp

            memory/904-16-0x00007FFF48B60000-0x00007FFF48B71000-memory.dmp

            memory/904-14-0x00007FFF48BA0000-0x00007FFF48BB1000-memory.dmp

            memory/904-13-0x00007FFF49390000-0x00007FFF493A7000-memory.dmp

            memory/904-12-0x00007FFF4E9F0000-0x00007FFF4EA08000-memory.dmp

            memory/904-34-0x00007FFF35320000-0x00007FFF35377000-memory.dmp

            memory/904-31-0x0000029FD32B0000-0x0000029FD4360000-memory.dmp

            memory/904-33-0x00007FFF41BB0000-0x00007FFF41BC1000-memory.dmp

            memory/904-32-0x00007FFF35380000-0x00007FFF353FC000-memory.dmp

            memory/904-109-0x0000029FD32B0000-0x0000029FD4360000-memory.dmp

            memory/904-187-0x0000029FD32B0000-0x0000029FD4360000-memory.dmp

            memory/904-213-0x0000029FD32B0000-0x0000029FD4360000-memory.dmp

            memory/904-239-0x0000029FD32B0000-0x0000029FD4360000-memory.dmp

            memory/904-265-0x0000029FD32B0000-0x0000029FD4360000-memory.dmp