Overview
overview
10Static
static
1498780a6-a...39.zip
windows10-2004-x64
1498780a6-a...39.zip
windows11-ltsc_2024-x64
1PACK8/t...p4.lnk
windows10-2004-x64
10PACK8/t...p4.lnk
windows11-ltsc_2024-x64
10PACK8/t...p4.lnk
windows10-2004-x64
10PACK8/t...p4.lnk
windows11-ltsc_2024-x64
10PACK8/t...p4.lnk
windows10-2004-x64
10PACK8/t...p4.lnk
windows11-ltsc_2024-x64
8PACK8/t...p4.lnk
windows10-2004-x64
7PACK8/t...p4.lnk
windows11-ltsc_2024-x64
6PACK8/t...p4.lnk
windows10-2004-x64
8PACK8/t...p4.lnk
windows11-ltsc_2024-x64
8ㅤㅤ/desktop.ini
windows10-2004-x64
1ㅤㅤ/desktop.ini
windows11-ltsc_2024-x64
1ㅤㅤ/tee...be.mp4
windows10-2004-x64
6ㅤㅤ/tee...be.mp4
windows11-ltsc_2024-x64
1ㅤㅤ/tee...ss.mp4
windows10-2004-x64
6ㅤㅤ/tee...ss.mp4
windows11-ltsc_2024-x64
1ㅤㅤ/tee...yf.mp4
windows10-2004-x64
6ㅤㅤ/tee...yf.mp4
windows11-ltsc_2024-x64
1ㅤㅤ/tee...es.mp4
windows10-2004-x64
6ㅤㅤ/tee...es.mp4
windows11-ltsc_2024-x64
1ㅤㅤ/tee...ad.mp4
windows10-2004-x64
6ㅤㅤ/tee...ad.mp4
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
26/06/2026, 04:27
Static task
static1
Behavioral task
behavioral1
Sample
498780a6-a6d6-49e0-a835-5ac234282139.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
498780a6-a6d6-49e0-a835-5ac234282139.zip
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
PACK8/teenSnapchatdihhfrombe.mp4.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
PACK8/teenSnapchatdihhfrombe.mp4.lnk
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
PACK8/teenpussyfeetandass.mp4.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
PACK8/teenpussyfeetandass.mp4.lnk
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
PACK8/teenreversecowgirlboyf.mp4.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
PACK8/teenreversecowgirlboyf.mp4.lnk
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral9
Sample
PACK8/teenslutdroppanties.mp4.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
PACK8/teenslutdroppanties.mp4.lnk
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral11
Sample
PACK8/teenslutpussyspread.mp4.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
PACK8/teenslutpussyspread.mp4.lnk
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral13
Sample
ㅤㅤ/desktop.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
ㅤㅤ/desktop.ini
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral15
Sample
ㅤㅤ/teenSnapchatdihhfrombe.mp4
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
ㅤㅤ/teenSnapchatdihhfrombe.mp4
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral17
Sample
ㅤㅤ/teenpussyfeetandass.mp4
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
ㅤㅤ/teenpussyfeetandass.mp4
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral19
Sample
ㅤㅤ/teenreversecowgirlboyf.mp4
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
ㅤㅤ/teenreversecowgirlboyf.mp4
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral21
Sample
ㅤㅤ/teenslutdroppanties.mp4
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
ㅤㅤ/teenslutdroppanties.mp4
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral23
Sample
ㅤㅤ/teenslutpussyspread.mp4
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
ㅤㅤ/teenslutpussyspread.mp4
Resource
win11ltsc2024-20260618-en
General
- Target ㅤㅤ/teenSnapchatdihhfrombe.mp4
- Size 4.6MB
- Sample260626-e3f1rahw6l
- SHA256 532d46090a544054b96fa307b739a58e29edfff17ea0618999e9f87c35ffba3d
- MD5 c94f429f7e7e478cdefa8645780a9851
- SHA1 bca97f88cdb180c6040851cfd367bf59ae77da18
- SHA512 2ce7cb1cb922673b4f50f04f7ed0cfae97261814672123dbff2ba01f1f763b009fde85ce3f2265720fb72a25c79b6b45915f7cff8239d83764ec5196005c7dca
- SSDEEP 98304:DDagnQizK1fAyvJ6SVRnIKZR7gHl83JtRDprspCKS0ZKEHTBIZAoH3mA:lK1fA2JIWR7rZftryVIZRH3mA
- TLSH T16B26332E9397BC5FD5F812B822681A47BC3BC82D59984B4F93B6F410CF6534169B02F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1504 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1504 vlc.exe - Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe - Suspicious use of SendNotifyMessage 8 IoCs
pid Process 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe 1504 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\ㅤㅤ\teenSnapchatdihhfrombe.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1504
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5508