Analysis
- geolocation tags
- max time kernel
899s - max time network
332s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
- submitted
06/07/2026, 22:53
General
- Target Video Project 44.mp4
- Size 2.7MB
- Sample260706-2t1p5ads2x
- SHA256 4337b67d57ff1a934653f5910166d283c567db6552a5f94ee3db6865aae5c3a9
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 25 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Video Project 44.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1008-0-0x00007FFF3BB1D000-0x00007FFF3BB1F000-memory.dmp
memory/1008-1-0x00007FFF3B870000-0x00007FFF3BB26000-memory.dmp
memory/1008-2-0x00007FFF3B870000-0x00007FFF3BB26000-memory.dmp
memory/1008-3-0x00007FFF3B870000-0x00007FFF3BB26000-memory.dmp
memory/1008-8-0x00007FFF3B870000-0x00007FFF3BB26000-memory.dmp
memory/1008-9-0x00007FFF3B870000-0x00007FFF3BB26000-memory.dmp
memory/1008-11-0x00007FFF3B870000-0x00007FFF3BB26000-memory.dmp
memory/1008-10-0x00007FFF3B870000-0x00007FFF3BB26000-memory.dmp
memory/1008-12-0x00007FFF3B870000-0x00007FFF3BB26000-memory.dmp
memory/1008-13-0x00007FFF3B870000-0x00007FFF3BB26000-memory.dmp
memory/1008-14-0x00007FFF3B870000-0x00007FFF3BB26000-memory.dmp
memory/1008-15-0x00007FFF3B870000-0x00007FFF3BB26000-memory.dmp
memory/1008-16-0x00007FFF3B870000-0x00007FFF3BB26000-memory.dmp
memory/1008-18-0x00007FFF3FF20000-0x00007FFF3FF54000-memory.dmp
memory/1008-17-0x00007FF7F9740000-0x00007FF7F9838000-memory.dmp
memory/1008-27-0x00007FFF373E0000-0x00007FFF375EB000-memory.dmp
memory/1008-28-0x00007FFF3E470000-0x00007FFF3E4B1000-memory.dmp
memory/1008-19-0x00007FFF3B870000-0x00007FFF3BB26000-memory.dmp
memory/1008-36-0x00007FFF3B5C0000-0x00007FFF3B5D1000-memory.dmp
memory/1008-42-0x00007FFF37680000-0x00007FFF376D7000-memory.dmp
memory/1008-44-0x00007FFF3B870000-0x00007FFF3BB26000-memory.dmp
memory/1008-43-0x000001A828B50000-0x000001A828CD0000-memory.dmp
memory/1008-29-0x00007FFF2B5E0000-0x00007FFF2C690000-memory.dmp
memory/1008-41-0x00007FFF379D0000-0x00007FFF379E1000-memory.dmp
memory/1008-40-0x00007FFF2EA00000-0x00007FFF2EA7C000-memory.dmp
memory/1008-39-0x00007FFF379F0000-0x00007FFF37A57000-memory.dmp
memory/1008-38-0x00007FFF37A60000-0x00007FFF37A90000-memory.dmp
memory/1008-35-0x00007FFF3B5E0000-0x00007FFF3B5FB000-memory.dmp
memory/1008-34-0x00007FFF3B600000-0x00007FFF3B611000-memory.dmp
memory/1008-33-0x00007FFF3D3D0000-0x00007FFF3D3E1000-memory.dmp
memory/1008-32-0x00007FFF3D3F0000-0x00007FFF3D401000-memory.dmp
memory/1008-31-0x00007FFF3D5A0000-0x00007FFF3D5B8000-memory.dmp
memory/1008-30-0x00007FFF3E440000-0x00007FFF3E461000-memory.dmp
memory/1008-37-0x00007FFF3B5A0000-0x00007FFF3B5B8000-memory.dmp
memory/1008-26-0x00007FFF3E4C0000-0x00007FFF3E4D1000-memory.dmp
memory/1008-25-0x00007FFF3E4E0000-0x00007FFF3E4FD000-memory.dmp
memory/1008-24-0x00007FFF3EC60000-0x00007FFF3EC71000-memory.dmp
memory/1008-23-0x00007FFF3FEC0000-0x00007FFF3FED7000-memory.dmp
memory/1008-22-0x00007FFF42DB0000-0x00007FFF42DC1000-memory.dmp
memory/1008-21-0x00007FFF449D0000-0x00007FFF449E7000-memory.dmp
memory/1008-20-0x00007FFF44DF0000-0x00007FFF44E08000-memory.dmp
memory/1008-57-0x00007FFF2B5E0000-0x00007FFF2C690000-memory.dmp
memory/1008-84-0x00007FFF2B5E0000-0x00007FFF2C690000-memory.dmp
memory/1008-192-0x00007FFF2B5E0000-0x00007FFF2C690000-memory.dmp
memory/1008-219-0x00007FFF2B5E0000-0x00007FFF2C690000-memory.dmp
memory/1008-246-0x00007FFF2B5E0000-0x00007FFF2C690000-memory.dmp
memory/1008-273-0x00007FFF2B5E0000-0x00007FFF2C690000-memory.dmp