Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
25/06/2026, 13:22
General
- Target DELTARUNE.Chapter.5/DELTARUNE.Chapter.5/mus/ominous_stab_harsh.ogg
- Size 54KB
- Sample260625-qmd21act2x
- SHA256 bde3676f6f0cceed5e1277779c0e5bfbbf868fa83cb0c71d375a83f096a21db8
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\DELTARUNE.Chapter.5\DELTARUNE.Chapter.5\mus\ominous_stab_harsh.ogg"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2420-0-0x00007FFAFB34D000-0x00007FFAFB34F000-memory.dmp
memory/2420-1-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-2-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-3-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-4-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-5-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-6-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-7-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-8-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-9-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-10-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-11-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-12-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-13-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-14-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-15-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-16-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-18-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-17-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-23-0x00007FFAFB0A0000-0x00007FFAFB356000-memory.dmp
memory/2420-24-0x00007FF66BAE0000-0x00007FF66BBD8000-memory.dmp
memory/2420-25-0x00007FFB11EB0000-0x00007FFB11EE4000-memory.dmp
memory/2420-27-0x00007FFB170F0000-0x00007FFB17101000-memory.dmp
memory/2420-29-0x00007FFB13200000-0x00007FFB13222000-memory.dmp
memory/2420-30-0x00007FFB11E00000-0x00007FFB11E2B000-memory.dmp
memory/2420-28-0x00007FFB15080000-0x00007FFB15099000-memory.dmp
memory/2420-33-0x00007FFB11DE0000-0x00007FFB11DF1000-memory.dmp
memory/2420-31-0x00007FFAFA8D0000-0x00007FFAFAC60000-memory.dmp
memory/2420-32-0x00007FFB13E60000-0x00007FFB13E74000-memory.dmp
memory/2420-43-0x00007FFB114E0000-0x00007FFB114FA000-memory.dmp
memory/2420-49-0x00007FFB059A0000-0x00007FFB059C5000-memory.dmp
memory/2420-48-0x00007FFB05E30000-0x00007FFB05E7F000-memory.dmp
memory/2420-51-0x00007FFB07960000-0x00007FFB0797B000-memory.dmp
memory/2420-50-0x00007FFAFAFF0000-0x00007FFAFB09B000-memory.dmp
memory/2420-54-0x000001C9B2D30000-0x000001C9B2D49000-memory.dmp
memory/2420-53-0x000001C9B1460000-0x000001C9B1471000-memory.dmp
memory/2420-52-0x000001C9B3370000-0x000001C9B3700000-memory.dmp
memory/2420-55-0x00007FFAF3490000-0x00007FFAF36D5000-memory.dmp
memory/2420-47-0x00007FFB03050000-0x00007FFB030E8000-memory.dmp
memory/2420-46-0x00007FFAFA420000-0x00007FFAFA62B000-memory.dmp
memory/2420-44-0x00007FFB0E240000-0x00007FFB0E251000-memory.dmp
memory/2420-45-0x00007FFB0C480000-0x00007FFB0C491000-memory.dmp
memory/2420-41-0x00007FFB0E890000-0x00007FFB0E8B6000-memory.dmp
memory/2420-40-0x00007FFB11730000-0x00007FFB11748000-memory.dmp
memory/2420-42-0x00007FFB0D850000-0x00007FFB0D87D000-memory.dmp
memory/2420-39-0x00007FFB0E8C0000-0x00007FFB0E8EF000-memory.dmp
memory/2420-38-0x00007FFB0E8F0000-0x00007FFB0E931000-memory.dmp
memory/2420-35-0x00007FFAFA630000-0x00007FFAFA8C6000-memory.dmp
memory/2420-37-0x00007FFB059D0000-0x00007FFB05AB3000-memory.dmp
memory/2420-36-0x00007FFB05AC0000-0x00007FFB05BA8000-memory.dmp
memory/2420-34-0x00007FFB11D00000-0x00007FFB11DD2000-memory.dmp