Analysis
- max time kernel
900s - max time network
818s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
- submitted
08/07/2026, 17:09
General
- Target attachment (9).mp4
- Size 2.8MB
- Sample260708-vph6ysc16l
- SHA256 1db45741c455c1ff2b691309986f5746926d3e72547b8551e2dcdc4248c91602
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 27 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\attachment (9).mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3632-0-0x00007FFA9958D000-0x00007FFA9958F000-memory.dmp
memory/3632-1-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-2-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-3-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-4-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-7-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-6-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-5-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-8-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-11-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-10-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-12-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-9-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-13-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-16-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-15-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-14-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-17-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-19-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-18-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-20-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-21-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-28-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-27-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-26-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-29-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-30-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-31-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-32-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-36-0x00007FFAA6730000-0x00007FFAA6741000-memory.dmp
memory/3632-38-0x00007FFAA2990000-0x00007FFAA29B2000-memory.dmp
memory/3632-34-0x00007FFAA2A40000-0x00007FFAA2A74000-memory.dmp
memory/3632-37-0x00007FFAA5770000-0x00007FFAA5789000-memory.dmp
memory/3632-33-0x00007FF74E2F0000-0x00007FF74E3E8000-memory.dmp
memory/3632-39-0x00007FFAA2960000-0x00007FFAA298B000-memory.dmp
memory/3632-42-0x00007FFAA2940000-0x00007FFAA2951000-memory.dmp
memory/3632-40-0x00007FFA8BD70000-0x00007FFA8C100000-memory.dmp
memory/3632-43-0x00007FFAA2860000-0x00007FFAA2932000-memory.dmp
memory/3632-41-0x00007FFAA41D0000-0x00007FFAA41E4000-memory.dmp
memory/3632-44-0x00007FFA99040000-0x00007FFA992D6000-memory.dmp
memory/3632-45-0x00007FFA96EB0000-0x00007FFA96F98000-memory.dmp
memory/3632-46-0x00007FFA96DC0000-0x00007FFA96EA3000-memory.dmp
memory/3632-55-0x00007FFA8BB60000-0x00007FFA8BD6B000-memory.dmp
memory/3632-61-0x000001CF30080000-0x000001CF301FA000-memory.dmp
memory/3632-63-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-62-0x00007FFA85CA0000-0x00007FFA85EE5000-memory.dmp
memory/3632-59-0x00007FFA8BAB0000-0x00007FFA8BB5B000-memory.dmp
memory/3632-60-0x00007FFA9C810000-0x00007FFA9C82B000-memory.dmp
memory/3632-58-0x00007FFA99010000-0x00007FFA99035000-memory.dmp
memory/3632-57-0x00007FFA9D3A0000-0x00007FFA9D3EF000-memory.dmp
memory/3632-56-0x00007FFA8E4E0000-0x00007FFA8E578000-memory.dmp
memory/3632-54-0x00007FFA9E400000-0x00007FFA9E411000-memory.dmp
memory/3632-51-0x00007FFA9E440000-0x00007FFA9E46D000-memory.dmp
memory/3632-50-0x00007FFA9E6E0000-0x00007FFA9E706000-memory.dmp
memory/3632-49-0x00007FFAA0880000-0x00007FFAA0898000-memory.dmp
memory/3632-48-0x00007FFAA08A0000-0x00007FFAA08CF000-memory.dmp
memory/3632-47-0x00007FFAA08D0000-0x00007FFAA0911000-memory.dmp
memory/3632-52-0x00007FFAA0860000-0x00007FFAA087A000-memory.dmp
memory/3632-53-0x00007FFA9E420000-0x00007FFA9E431000-memory.dmp
memory/3632-35-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-66-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp
memory/3632-96-0x00007FFA992E0000-0x00007FFA99596000-memory.dmp