Analysis
- max time kernel
899s - max time network
431s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
14/07/2026, 15:02
Static task
static1
Behavioral task
behavioral1
Sample
to tylko poczatek.mp3
Resource
win10v2004-20260513-en
16 signatures
900 seconds
Behavioral task
behavioral2
Sample
to tylko poczatek.mp3
Resource
win10ltsc2021-20260513-en
5 signatures
900 seconds
General
- Target to tylko poczatek.mp3
- Size 2.4MB
- Sample260714-sethtsft3k
- SHA256 905fe848bf3fe083c1c172f202d99edec7bdf57b3fc9ec3a5fcbf661f30c7215
- MD5 85ec4a26020470a26d0a78404e0c058a
- SHA1 3f7ffbc94bd5b6f229efb1a5181b9fc6f194798b
- SHA512 8aabe79a92a86005c96f054364c83c5352deb84bc7a0c831c6681564e50cbbe6ce29d22ed6b5659d9e08deb14b932abf5b76db4b13567371ea0318f0ac7888af
- SSDEEP 49152:BRBirBwXNF0lm2IodLsa3Os1lpM7xLcKfnoaH+xUznNmWYLcQToZyoN7y5:0BwX0cNyOselbOCNmxToZNQ5
- TLSH T12BC53320972094A8C8F9A73B8FDB6F6589153FF62E1135A43E80777741376B0B6A64CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1816 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1816 vlc.exe - Suspicious use of FindShellTrayWindow 9 IoCs
pid Process 1816 vlc.exe 1816 vlc.exe 1816 vlc.exe 1816 vlc.exe 1816 vlc.exe 1816 vlc.exe 1816 vlc.exe 1816 vlc.exe 1816 vlc.exe - Suspicious use of SendNotifyMessage 8 IoCs
pid Process 1816 vlc.exe 1816 vlc.exe 1816 vlc.exe 1816 vlc.exe 1816 vlc.exe 1816 vlc.exe 1816 vlc.exe 1816 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1816 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\to tylko poczatek.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1816