Analysis
- max time kernel
148s - max time network
112s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/07/2026, 00:05
General
- Target صدام.mov
- Size 355KB
- Sample260710-ac87dscs2y
- SHA256 2bce82a023ffd6d083c9272d3129f5f8722a1c58008c5291478f340401303d3a
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 27 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\صدام.mov"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1156-0-0x00007FFCB643D000-0x00007FFCB643F000-memory.dmp
memory/1156-1-0x00007FFCB6190000-0x00007FFCB6446000-memory.dmp
memory/1156-2-0x00007FFCB6190000-0x00007FFCB6446000-memory.dmp
memory/1156-3-0x00007FFCB6190000-0x00007FFCB6446000-memory.dmp
memory/1156-4-0x00007FFCB6190000-0x00007FFCB6446000-memory.dmp
memory/1156-9-0x00007FFCB6190000-0x00007FFCB6446000-memory.dmp
memory/1156-11-0x00007FFCB6190000-0x00007FFCB6446000-memory.dmp
memory/1156-10-0x00007FFCB6190000-0x00007FFCB6446000-memory.dmp
memory/1156-12-0x00007FFCB6190000-0x00007FFCB6446000-memory.dmp
memory/1156-13-0x00007FFCB6190000-0x00007FFCB6446000-memory.dmp
memory/1156-14-0x00007FFCB6190000-0x00007FFCB6446000-memory.dmp
memory/1156-15-0x00007FFCB6190000-0x00007FFCB6446000-memory.dmp
memory/1156-16-0x00007FFCB6190000-0x00007FFCB6446000-memory.dmp
memory/1156-17-0x00007FF75FCF0000-0x00007FF75FDE8000-memory.dmp
memory/1156-25-0x00007FFCBF390000-0x00007FFCBF3AD000-memory.dmp
memory/1156-26-0x00007FFCBD350000-0x00007FFCBD361000-memory.dmp
memory/1156-24-0x00007FFCBF4B0000-0x00007FFCBF4C1000-memory.dmp
memory/1156-27-0x00007FFCB06C0000-0x00007FFCB08CB000-memory.dmp
memory/1156-23-0x00007FFCC0990000-0x00007FFCC09A7000-memory.dmp
memory/1156-19-0x00007FFCB6190000-0x00007FFCB6446000-memory.dmp
memory/1156-22-0x00007FFCC0A20000-0x00007FFCC0A31000-memory.dmp
memory/1156-39-0x00007FFCB9730000-0x00007FFCB9797000-memory.dmp
memory/1156-30-0x00007FFCBA280000-0x00007FFCBA2A1000-memory.dmp
memory/1156-20-0x00007FFCC6C60000-0x00007FFCC6C78000-memory.dmp
memory/1156-18-0x00007FFCC4FE0000-0x00007FFCC5014000-memory.dmp
memory/1156-21-0x00007FFCC4FC0000-0x00007FFCC4FD7000-memory.dmp
memory/1156-42-0x00007FFCB73B0000-0x00007FFCB7407000-memory.dmp
memory/1156-41-0x00007FFCB9710000-0x00007FFCB9721000-memory.dmp
memory/1156-28-0x00007FFCAD860000-0x00007FFCAE910000-memory.dmp
memory/1156-40-0x00007FFCB9550000-0x00007FFCB95CC000-memory.dmp
memory/1156-38-0x00007FFCB97A0000-0x00007FFCB97D0000-memory.dmp
memory/1156-37-0x00007FFCB97D0000-0x00007FFCB97E8000-memory.dmp
memory/1156-45-0x0000025EAC7F0000-0x0000025EAC805000-memory.dmp
memory/1156-44-0x0000025EAC7D0000-0x0000025EAC7E2000-memory.dmp
memory/1156-36-0x00007FFCB97F0000-0x00007FFCB9801000-memory.dmp
memory/1156-35-0x00007FFCB9810000-0x00007FFCB982B000-memory.dmp
memory/1156-34-0x00007FFCB9830000-0x00007FFCB9841000-memory.dmp
memory/1156-33-0x00007FFCB9850000-0x00007FFCB9861000-memory.dmp
memory/1156-32-0x00007FFCBA260000-0x00007FFCBA271000-memory.dmp
memory/1156-31-0x00007FFCBC920000-0x00007FFCBC938000-memory.dmp
memory/1156-29-0x00007FFCBA2B0000-0x00007FFCBA2F1000-memory.dmp
memory/1156-43-0x0000025EAA4E0000-0x0000025EABD4F000-memory.dmp
memory/1156-48-0x00007FFCB6190000-0x00007FFCB6446000-memory.dmp
memory/1156-72-0x0000025EAA4E0000-0x0000025EABD4F000-memory.dmp
memory/1156-57-0x00007FFCAD860000-0x00007FFCAE910000-memory.dmp
memory/1156-115-0x00007FFCAD860000-0x00007FFCAE910000-memory.dmp
memory/1156-202-0x00007FFCAD860000-0x00007FFCAE910000-memory.dmp
memory/1156-231-0x00007FFCAD860000-0x00007FFCAE910000-memory.dmp
memory/1156-260-0x00007FFCAD860000-0x00007FFCAE910000-memory.dmp
memory/1156-289-0x00007FFCAD860000-0x00007FFCAE910000-memory.dmp