Analysis
- max time kernel
153s - max time network
209s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
- submitted
25/06/2026, 13:22
General
- Target DELTARUNE.Chapter.5/DELTARUNE.Chapter.5/mus/ocean.ogg
- Size 146KB
- Sample260625-qmd21act2x
- SHA256 0035deea016fe978a5359e6c1f2b17c997e18d716e64e27669cb96d34c3480a2
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\DELTARUNE.Chapter.5\DELTARUNE.Chapter.5\mus\ocean.ogg"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4648-0-0x00007FF8EA88D000-0x00007FF8EA88F000-memory.dmp
memory/4648-1-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-2-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-3-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-4-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-5-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-7-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-6-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-9-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-8-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-12-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-13-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-15-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-14-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-11-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-10-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-16-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-17-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-22-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-23-0x00007FF8EA5E0000-0x00007FF8EA896000-memory.dmp
memory/4648-24-0x00007FF6816F0000-0x00007FF6817E8000-memory.dmp
memory/4648-25-0x00007FF901610000-0x00007FF901644000-memory.dmp
memory/4648-30-0x00007FF8FCC00000-0x00007FF8FCC2B000-memory.dmp
memory/4648-29-0x00007FF8FE0A0000-0x00007FF8FE0C2000-memory.dmp
memory/4648-28-0x00007FF902E10000-0x00007FF902E29000-memory.dmp
memory/4648-27-0x00007FF904740000-0x00007FF904751000-memory.dmp
memory/4648-33-0x00007FF9015B0000-0x00007FF9015C1000-memory.dmp
memory/4648-31-0x00007FF8EA000000-0x00007FF8EA390000-memory.dmp
memory/4648-34-0x00007FF8FCB20000-0x00007FF8FCBF2000-memory.dmp
memory/4648-32-0x00007FF902B30000-0x00007FF902B44000-memory.dmp
memory/4648-35-0x00007FF8E9D60000-0x00007FF8E9FF6000-memory.dmp
memory/4648-45-0x00007FF8F5C30000-0x00007FF8F5C41000-memory.dmp
memory/4648-44-0x00007FF8F77A0000-0x00007FF8F77B1000-memory.dmp
memory/4648-51-0x00007FF8F58C0000-0x00007FF8F58DB000-memory.dmp
memory/4648-53-0x00007FF8E3A30000-0x00007FF8E3C75000-memory.dmp
memory/4648-52-0x000001B249630000-0x000001B24970F000-memory.dmp
memory/4648-50-0x00007FF8E99B0000-0x00007FF8E9A5B000-memory.dmp
memory/4648-48-0x00007FF8F3560000-0x00007FF8F35AF000-memory.dmp
memory/4648-47-0x00007FF8F5B90000-0x00007FF8F5C28000-memory.dmp
memory/4648-46-0x00007FF8E9A60000-0x00007FF8E9C6B000-memory.dmp
memory/4648-49-0x00007FF8ED430000-0x00007FF8ED455000-memory.dmp
memory/4648-43-0x00007FF8FB500000-0x00007FF8FB51A000-memory.dmp
memory/4648-41-0x00007FF8FCA50000-0x00007FF8FCA76000-memory.dmp
memory/4648-40-0x00007FF8FCA80000-0x00007FF8FCA98000-memory.dmp
memory/4648-36-0x00007FF8ED460000-0x00007FF8ED548000-memory.dmp
memory/4648-39-0x00007FF8FCAA0000-0x00007FF8FCACF000-memory.dmp
memory/4648-37-0x00007FF8E9C70000-0x00007FF8E9D53000-memory.dmp
memory/4648-38-0x00007FF8FCAD0000-0x00007FF8FCB11000-memory.dmp
memory/4648-42-0x00007FF8FBDF0000-0x00007FF8FBE1D000-memory.dmp