Analysis
- max time kernel
898s - max time network
468s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260630-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/07/2026, 09:19
Static task
static1
Behavioral task
behavioral1
Sample
Untitled.mp4
Resource
win11-20260513-en
37 signatures
900 seconds
Behavioral task
behavioral2
Sample
Untitled.mp4
Resource
win11ltsc2024-20260630-en
5 signatures
900 seconds
General
- Target Untitled.mp4
- Size 6.4MB
- Sample260702-lak8bsfs7x
- SHA256 d6a88bb5644b4055e98d2d94961437e591906e6f24be829785b141198621d400
- MD5 6e229249fe2bf4dd70ae9be6c0c20c33
- SHA1 71811f08c7d4348c86f15b39c1a96a52692cf662
- SHA512 1fdbffc737266a9717919d35d6870e59b659372f2c714c73bfba46d0e01634797ae5f4e81561fd8e626059d57820cad067cd8cd986984ac552d70c193b4b698f
- SSDEEP 98304:0K58yH7SdcNk7yDK58yH7SdcNk7iK58yH7SdcNk7aK58yH7SdcNk7Iw:iEf5/EftEflEfVw
- TLSH T11B66231143FA7AF7ECBD65F280FE161DA310BA911F61C3C7990B96216AE36E4CD13660
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3516 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3516 vlc.exe - Suspicious use of FindShellTrayWindow 24 IoCs
pid Process 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe 3516 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Untitled.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3516
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4732
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:6100