Analysis
- max time kernel
64s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
25/06/2026, 13:22
General
- Target DELTARUNE.Chapter.5/DELTARUNE.Chapter.5/mus/noelle_distant.ogg
- Size 510KB
- Sample260625-qmd21act2x
- SHA256 2ce98ca28f08c041640fe903a28893fe7de01110e2d3cf806168bf13be4a482d
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\DELTARUNE.Chapter.5\DELTARUNE.Chapter.5\mus\noelle_distant.ogg"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4780-0-0x00007FFD4696D000-0x00007FFD4696F000-memory.dmp
memory/4780-1-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-2-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-3-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-5-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-8-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-7-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-6-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-4-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-9-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-12-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-11-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-13-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-10-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-14-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-15-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-17-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-16-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-22-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-23-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-24-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp
memory/4780-25-0x00007FF73C960000-0x00007FF73CA58000-memory.dmp
memory/4780-26-0x00007FFD5D0E0000-0x00007FFD5D114000-memory.dmp
memory/4780-29-0x00007FFD60DE0000-0x00007FFD60DF9000-memory.dmp
memory/4780-28-0x00007FFD61060000-0x00007FFD61071000-memory.dmp
memory/4780-30-0x00007FFD5D070000-0x00007FFD5D092000-memory.dmp
memory/4780-31-0x00007FFD5B670000-0x00007FFD5B69B000-memory.dmp
memory/4780-34-0x00007FFD5B630000-0x00007FFD5B641000-memory.dmp
memory/4780-33-0x00007FFD5B650000-0x00007FFD5B664000-memory.dmp
memory/4780-35-0x00007FFD581B0000-0x00007FFD58282000-memory.dmp
memory/4780-32-0x00007FFD460E0000-0x00007FFD46470000-memory.dmp
memory/4780-42-0x00007FFD57740000-0x00007FFD57766000-memory.dmp
memory/4780-46-0x00007FFD53210000-0x00007FFD53221000-memory.dmp
memory/4780-50-0x00007FFD4F050000-0x00007FFD4F075000-memory.dmp
memory/4780-48-0x00007FFD51100000-0x00007FFD51198000-memory.dmp
memory/4780-49-0x00007FFD45BE0000-0x00007FFD45C2F000-memory.dmp
memory/4780-51-0x00007FFD45B30000-0x00007FFD45BDB000-memory.dmp
memory/4780-54-0x00007FFD3F8B0000-0x00007FFD3FAF5000-memory.dmp
memory/4780-53-0x000002832B890000-0x000002832BB6B000-memory.dmp
memory/4780-47-0x00007FFD45C30000-0x00007FFD45E3B000-memory.dmp
memory/4780-52-0x00007FFD4EE50000-0x00007FFD4EE6B000-memory.dmp
memory/4780-38-0x00007FFD511A0000-0x00007FFD51283000-memory.dmp
memory/4780-37-0x00007FFD580C0000-0x00007FFD581A8000-memory.dmp
memory/4780-45-0x00007FFD580A0000-0x00007FFD580B1000-memory.dmp
memory/4780-44-0x00007FFD58340000-0x00007FFD5835A000-memory.dmp
memory/4780-43-0x00007FFD57710000-0x00007FFD5773D000-memory.dmp
memory/4780-41-0x00007FFD5A6A0000-0x00007FFD5A6B8000-memory.dmp
memory/4780-40-0x00007FFD58ED0000-0x00007FFD58EFF000-memory.dmp
memory/4780-39-0x00007FFD5B5E0000-0x00007FFD5B621000-memory.dmp
memory/4780-36-0x00007FFD45E40000-0x00007FFD460D6000-memory.dmp
memory/4780-147-0x00007FFD466C0000-0x00007FFD46976000-memory.dmp