Analysis
- max time kernel
149s - max time network
179s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
17/07/2026, 22:13
General
- Target art/sound/engine/Nsx_Aftermarket_Exhaust/nsx_aftermarketexhaust_off_4608.wav
- Size 450KB
- Sample260717-15cxrsbs8z
- SHA256 30c4e6f5b98a648914db43b0d5bb904c5a6a65e95bbb769f4ffcb1f84d0b3109
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\engine\Nsx_Aftermarket_Exhaust\nsx_aftermarketexhaust_off_4608.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4332-0-0x00007FF9C849D000-0x00007FF9C849F000-memory.dmp
memory/4332-1-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-2-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-3-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-4-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-5-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-6-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-7-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-8-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-10-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-11-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-9-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-13-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-12-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-18-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-19-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-20-0x00007FF9C81F0000-0x00007FF9C84A6000-memory.dmp
memory/4332-21-0x00007FF7643F0000-0x00007FF7644E8000-memory.dmp
memory/4332-22-0x00007FF9D4400000-0x00007FF9D4434000-memory.dmp
memory/4332-26-0x00007FF9CFCA0000-0x00007FF9CFCC2000-memory.dmp
memory/4332-27-0x00007FF9CFC70000-0x00007FF9CFC9B000-memory.dmp
memory/4332-25-0x00007FF9D1450000-0x00007FF9D1469000-memory.dmp
memory/4332-24-0x00007FF9D59B0000-0x00007FF9D59C1000-memory.dmp
memory/4332-29-0x00007FF9CFC50000-0x00007FF9CFC64000-memory.dmp
memory/4332-30-0x00007FF9CFC30000-0x00007FF9CFC41000-memory.dmp
memory/4332-31-0x00007FF9C2090000-0x00007FF9C2162000-memory.dmp
memory/4332-28-0x00007FF9BD960000-0x00007FF9BDCF0000-memory.dmp
memory/4332-32-0x00007FF9BD6C0000-0x00007FF9BD956000-memory.dmp
memory/4332-43-0x00007FF9BF790000-0x00007FF9BF99B000-memory.dmp
memory/4332-33-0x00007FF9C1810000-0x00007FF9C18F8000-memory.dmp
memory/4332-46-0x00007FF9C60D0000-0x00007FF9C60F5000-memory.dmp
memory/4332-50-0x00007FF9B7230000-0x00007FF9B7475000-memory.dmp
memory/4332-49-0x000001F607590000-0x000001F607920000-memory.dmp
memory/4332-45-0x00007FF9C6310000-0x00007FF9C635F000-memory.dmp
memory/4332-44-0x00007FF9C1FF0000-0x00007FF9C2088000-memory.dmp
memory/4332-48-0x00007FF9C62F0000-0x00007FF9C630B000-memory.dmp
memory/4332-47-0x00007FF9C1760000-0x00007FF9C180B000-memory.dmp
memory/4332-42-0x00007FF9C6360000-0x00007FF9C6371000-memory.dmp
memory/4332-41-0x00007FF9C6380000-0x00007FF9C6391000-memory.dmp
memory/4332-40-0x00007FF9C7C00000-0x00007FF9C7C1A000-memory.dmp
memory/4332-39-0x00007FF9C7C20000-0x00007FF9C7C4D000-memory.dmp
memory/4332-38-0x00007FF9C81C0000-0x00007FF9C81E6000-memory.dmp
memory/4332-37-0x00007FF9CF670000-0x00007FF9CF688000-memory.dmp
memory/4332-36-0x00007FF9CFC00000-0x00007FF9CFC2F000-memory.dmp
memory/4332-35-0x00007FF9CF490000-0x00007FF9CF4D1000-memory.dmp
memory/4332-34-0x00007FF9C12A0000-0x00007FF9C1383000-memory.dmp