Analysis
- max time kernel
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
25/06/2026, 13:22
General
- Target DELTARUNE.Chapter.5/DELTARUNE.Chapter.5/mus/ominous_worse.ogg
- Size 62KB
- Sample260625-qmd21act2x
- SHA256 2fd820d8ded220c06742705334142a8aa77a2a3edf61cf781b96450fbd477693
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\DELTARUNE.Chapter.5\DELTARUNE.Chapter.5\mus\ominous_worse.ogg"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2060-0-0x00007FFD4A1ED000-0x00007FFD4A1EF000-memory.dmp
memory/2060-1-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-2-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-3-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-4-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-5-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-6-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-7-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-8-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-9-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-10-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-11-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-12-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-13-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-15-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-14-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-21-0x00007FFD5C2F0000-0x00007FFD5C324000-memory.dmp
memory/2060-23-0x00007FFD64510000-0x00007FFD64521000-memory.dmp
memory/2060-22-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-26-0x00007FFD5B1B0000-0x00007FFD5B1DB000-memory.dmp
memory/2060-25-0x00007FFD5CF80000-0x00007FFD5CFA2000-memory.dmp
memory/2060-24-0x00007FFD62830000-0x00007FFD62849000-memory.dmp
memory/2060-20-0x00007FF69F4D0000-0x00007FF69F5C8000-memory.dmp
memory/2060-29-0x00007FFD5F0C0000-0x00007FFD5F0D1000-memory.dmp
memory/2060-28-0x00007FFD62510000-0x00007FFD62524000-memory.dmp
memory/2060-30-0x00007FFD54FC0000-0x00007FFD55092000-memory.dmp
memory/2060-27-0x00007FFD49960000-0x00007FFD49CF0000-memory.dmp
memory/2060-32-0x00007FFD4A4E0000-0x00007FFD4A5C8000-memory.dmp
memory/2060-41-0x00007FFD54F70000-0x00007FFD54F81000-memory.dmp
memory/2060-40-0x00007FFD55400000-0x00007FFD55411000-memory.dmp
memory/2060-39-0x00007FFD56730000-0x00007FFD5674A000-memory.dmp
memory/2060-33-0x00007FFD4A3F0000-0x00007FFD4A4D3000-memory.dmp
memory/2060-38-0x00007FFD54F90000-0x00007FFD54FBD000-memory.dmp
memory/2060-42-0x00007FFD494B0000-0x00007FFD496BB000-memory.dmp
memory/2060-47-0x00007FFD54F00000-0x00007FFD54F1B000-memory.dmp
memory/2060-46-0x00007FFD49400000-0x00007FFD494AB000-memory.dmp
memory/2060-50-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp
memory/2060-49-0x00007FFD434A0000-0x00007FFD436E5000-memory.dmp
memory/2060-48-0x000001EDFD100000-0x000001EDFD3DB000-memory.dmp
memory/2060-44-0x00007FFD54F20000-0x00007FFD54F6F000-memory.dmp
memory/2060-43-0x00007FFD526F0000-0x00007FFD52788000-memory.dmp
memory/2060-45-0x00007FFD4AC50000-0x00007FFD4AC75000-memory.dmp
memory/2060-37-0x00007FFD55420000-0x00007FFD55446000-memory.dmp
memory/2060-36-0x00007FFD5B270000-0x00007FFD5B288000-memory.dmp
memory/2060-35-0x00007FFD55450000-0x00007FFD5547F000-memory.dmp
memory/2060-34-0x00007FFD55480000-0x00007FFD554C1000-memory.dmp
memory/2060-31-0x00007FFD496C0000-0x00007FFD49956000-memory.dmp
memory/2060-51-0x00007FFD49F40000-0x00007FFD4A1F6000-memory.dmp