Analysis
- max time kernel
149s - max time network
169s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
17/07/2026, 22:13
General
- Target art/sound/engine/Nsx_Aftermarket_Exhaust/nsx_aftermarketexhaust_off_1796.wav
- Size 449KB
- Sample260717-15cxrsbs8z
- SHA256 9c3161477f670d708d8adbfe9e5eafb7f8c6be33df45f2e8eef4dd388cbb613a
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\engine\Nsx_Aftermarket_Exhaust\nsx_aftermarketexhaust_off_1796.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4800-0-0x00007FFCCA32D000-0x00007FFCCA32F000-memory.dmp
memory/4800-1-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-2-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-3-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-5-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-4-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-6-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-7-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-8-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-9-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-10-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-11-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-13-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-12-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-15-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-14-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-17-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-16-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-18-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-19-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-24-0x00007FF64A3B0000-0x00007FF64A4A8000-memory.dmp
memory/4800-25-0x00007FFCDCE80000-0x00007FFCDCEB4000-memory.dmp
memory/4800-26-0x00007FFCCA080000-0x00007FFCCA336000-memory.dmp
memory/4800-30-0x00007FFCD0C80000-0x00007FFCD0CAB000-memory.dmp
memory/4800-29-0x00007FFCD20B0000-0x00007FFCD20D2000-memory.dmp
memory/4800-28-0x00007FFCDCDD0000-0x00007FFCDCDE9000-memory.dmp
memory/4800-27-0x00007FFCDCE60000-0x00007FFCDCE71000-memory.dmp
memory/4800-33-0x00007FFCD70C0000-0x00007FFCD70D1000-memory.dmp
memory/4800-32-0x00007FFCD7DF0000-0x00007FFCD7E04000-memory.dmp
memory/4800-34-0x00007FFCC9CF0000-0x00007FFCC9DC2000-memory.dmp
memory/4800-35-0x00007FFCC5DD0000-0x00007FFCC6066000-memory.dmp
memory/4800-38-0x00007FFCCF0A0000-0x00007FFCCF0E1000-memory.dmp
memory/4800-37-0x00007FFCC5CE0000-0x00007FFCC5DC3000-memory.dmp
memory/4800-45-0x00007FFCD0C60000-0x00007FFCD0C71000-memory.dmp
memory/4800-44-0x00007FFCD11C0000-0x00007FFCD11D1000-memory.dmp
memory/4800-47-0x00007FFCC9FE0000-0x00007FFCCA078000-memory.dmp
memory/4800-46-0x00007FFCC5AD0000-0x00007FFCC5CDB000-memory.dmp
memory/4800-31-0x00007FFCC6070000-0x00007FFCC6400000-memory.dmp
memory/4800-43-0x00007FFCD2090000-0x00007FFCD20AA000-memory.dmp
memory/4800-50-0x00007FFCC9C40000-0x00007FFCC9CEB000-memory.dmp
memory/4800-51-0x00007FFCCF080000-0x00007FFCCF09B000-memory.dmp
memory/4800-53-0x00007FFCBFBD0000-0x00007FFCBFE15000-memory.dmp
memory/4800-52-0x000001AE94A10000-0x000001AE94DA0000-memory.dmp
memory/4800-49-0x00007FFCCD890000-0x00007FFCCD8B5000-memory.dmp
memory/4800-48-0x00007FFCCD8C0000-0x00007FFCCD90F000-memory.dmp
memory/4800-42-0x00007FFCCD910000-0x00007FFCCD93D000-memory.dmp
memory/4800-41-0x00007FFCCDCE0000-0x00007FFCCDD06000-memory.dmp
memory/4800-40-0x00007FFCD3440000-0x00007FFCD3458000-memory.dmp
memory/4800-36-0x00007FFCC9390000-0x00007FFCC9478000-memory.dmp
memory/4800-39-0x00007FFCCEF30000-0x00007FFCCEF5F000-memory.dmp