Analysis
- max time kernel
899s - max time network
468s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
- submitted
08/07/2026, 03:44
General
- Target ITS TIME FOR DA PERCULATOR.mp3
- Size 5.8MB
- Sample260708-eagrksat2v
- SHA256 78b5ec1f3b7768140f95e7bbabea754783b3f0e965567f7ee8765bea345421a3
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\ITS TIME FOR DA PERCULATOR.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5052-0-0x00007FFFEFF4D000-0x00007FFFEFF4F000-memory.dmp
memory/5052-1-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-2-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-3-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-4-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-5-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-6-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-7-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-8-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-9-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-10-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-11-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-12-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-14-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-13-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-16-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-15-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-21-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp
memory/5052-22-0x00007FF773C70000-0x00007FF773D68000-memory.dmp
memory/5052-23-0x00007FF807D20000-0x00007FF807D54000-memory.dmp
memory/5052-28-0x00007FF806870000-0x00007FF80689B000-memory.dmp
memory/5052-27-0x00007FF8068A0000-0x00007FF8068C2000-memory.dmp
memory/5052-26-0x00007FF8068D0000-0x00007FF8068E9000-memory.dmp
memory/5052-25-0x00007FF80A570000-0x00007FF80A581000-memory.dmp
memory/5052-31-0x00007FF806830000-0x00007FF806841000-memory.dmp
memory/5052-30-0x00007FF806850000-0x00007FF806864000-memory.dmp
memory/5052-29-0x00007FFFEF6C0000-0x00007FFFEFA50000-memory.dmp
memory/5052-33-0x00007FFFEF420000-0x00007FFFEF6B6000-memory.dmp
memory/5052-32-0x00007FF806750000-0x00007FF806822000-memory.dmp
memory/5052-35-0x00007FFFEF240000-0x00007FFFEF323000-memory.dmp
memory/5052-34-0x00007FFFEF330000-0x00007FFFEF418000-memory.dmp
memory/5052-49-0x00007FFFF8A40000-0x00007FFFF8A5B000-memory.dmp
memory/5052-50-0x00007FFFE8F20000-0x00007FFFE9165000-memory.dmp
memory/5052-48-0x00007FFFEEEE0000-0x00007FFFEEF8B000-memory.dmp
memory/5052-44-0x00007FFFEF030000-0x00007FFFEF23B000-memory.dmp
memory/5052-47-0x00007FFFF8A60000-0x00007FFFF8A85000-memory.dmp
memory/5052-46-0x00007FFFFAB90000-0x00007FFFFABDF000-memory.dmp
memory/5052-45-0x00007FFFEEF90000-0x00007FFFEF028000-memory.dmp
memory/5052-43-0x00007FFFFABE0000-0x00007FFFFABF1000-memory.dmp
memory/5052-42-0x00007FFFFCE00000-0x00007FFFFCE11000-memory.dmp
memory/5052-41-0x00007FF800A80000-0x00007FF800A9A000-memory.dmp
memory/5052-39-0x00007FF802A50000-0x00007FF802A76000-memory.dmp
memory/5052-37-0x00007FF804120000-0x00007FF80414F000-memory.dmp
memory/5052-40-0x00007FFFFAC00000-0x00007FFFFAC2D000-memory.dmp
memory/5052-38-0x00007FF802BC0000-0x00007FF802BD8000-memory.dmp
memory/5052-36-0x00007FFFFB5C0000-0x00007FFFFB601000-memory.dmp
memory/5052-749-0x00007FFFEFCA0000-0x00007FFFEFF56000-memory.dmp