Analysis
- max time kernel
150s - max time network
170s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
17/07/2026, 22:13
General
- Target art/sound/engine/Nsx_Aftermarket_Exhaust/nsx_aftermarketexhaust_off_1416.wav
- Size 450KB
- Sample260717-15cxrsbs8z
- SHA256 ffb680d1164650d2ec4fc1aae6aefa5536bd9867ba7c827decaf65bd82890ff8
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\engine\Nsx_Aftermarket_Exhaust\nsx_aftermarketexhaust_off_1416.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3212-0-0x00007FFD6120D000-0x00007FFD6120F000-memory.dmp
memory/3212-2-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-1-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-3-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-4-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-5-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-6-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-8-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-7-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-10-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-9-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-11-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-12-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-13-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-14-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-15-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-16-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-17-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-18-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-23-0x00007FFD60F60000-0x00007FFD61216000-memory.dmp
memory/3212-24-0x00007FF6E9100000-0x00007FF6E91F8000-memory.dmp
memory/3212-27-0x00007FFD795F0000-0x00007FFD79601000-memory.dmp
memory/3212-30-0x00007FFD73B60000-0x00007FFD73B8B000-memory.dmp
memory/3212-29-0x00007FFD73B90000-0x00007FFD73BB2000-memory.dmp
memory/3212-28-0x00007FFD778D0000-0x00007FFD778E9000-memory.dmp
memory/3212-25-0x00007FFD778F0000-0x00007FFD77924000-memory.dmp
memory/3212-32-0x00007FFD73B40000-0x00007FFD73B54000-memory.dmp
memory/3212-33-0x00007FFD73B20000-0x00007FFD73B31000-memory.dmp
memory/3212-34-0x00007FFD73A40000-0x00007FFD73B12000-memory.dmp
memory/3212-31-0x00007FFD60980000-0x00007FFD60D10000-memory.dmp
memory/3212-36-0x00007FFD6BE90000-0x00007FFD6BF78000-memory.dmp
memory/3212-38-0x00007FFD739F0000-0x00007FFD73A31000-memory.dmp
memory/3212-43-0x00007FFD70720000-0x00007FFD7073A000-memory.dmp
memory/3212-39-0x00007FFD72D40000-0x00007FFD72D6F000-memory.dmp
memory/3212-46-0x00007FFD604D0000-0x00007FFD606DB000-memory.dmp
memory/3212-45-0x00007FFD6F700000-0x00007FFD6F711000-memory.dmp
memory/3212-44-0x00007FFD701A0000-0x00007FFD701B1000-memory.dmp
memory/3212-41-0x00007FFD72D10000-0x00007FFD72D36000-memory.dmp
memory/3212-40-0x00007FFD739D0000-0x00007FFD739E8000-memory.dmp
memory/3212-50-0x00007FFD67660000-0x00007FFD6770B000-memory.dmp
memory/3212-51-0x00007FFD6DFE0000-0x00007FFD6DFFB000-memory.dmp
memory/3212-49-0x00007FFD6BE10000-0x00007FFD6BE35000-memory.dmp
memory/3212-52-0x000002353C290000-0x000002353C620000-memory.dmp
memory/3212-48-0x00007FFD6BE40000-0x00007FFD6BE8F000-memory.dmp
memory/3212-53-0x00007FFD5A850000-0x00007FFD5AA95000-memory.dmp
memory/3212-47-0x00007FFD6C280000-0x00007FFD6C318000-memory.dmp
memory/3212-42-0x00007FFD6C320000-0x00007FFD6C34D000-memory.dmp
memory/3212-37-0x00007FFD679C0000-0x00007FFD67AA3000-memory.dmp
memory/3212-35-0x00007FFD606E0000-0x00007FFD60976000-memory.dmp