Analysis
- max time kernel
152s - max time network
156s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
17/07/2026, 22:13
General
- Target art/sound/air.backup.ogg
- Size 88KB
- Sample260717-15cxrsbs8z
- SHA256 14cb48ce33f5d498d1b18a4122bdefec49eed4825862864b513930fde8238f4d
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\air.backup.ogg"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3092-0-0x00007FFD0942D000-0x00007FFD0942F000-memory.dmp
memory/3092-1-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-2-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-3-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-4-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-5-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-6-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-8-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-7-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-9-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-11-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-12-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-14-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-13-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-10-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-16-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-15-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-21-0x00007FF718960000-0x00007FF718A58000-memory.dmp
memory/3092-22-0x00007FFD20850000-0x00007FFD20884000-memory.dmp
memory/3092-26-0x00007FFD1CFC0000-0x00007FFD1CFE2000-memory.dmp
memory/3092-27-0x00007FFD1CB20000-0x00007FFD1CB4B000-memory.dmp
memory/3092-25-0x00007FFD20A40000-0x00007FFD20A59000-memory.dmp
memory/3092-24-0x00007FFD20AA0000-0x00007FFD20AB1000-memory.dmp
memory/3092-23-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-28-0x00007FFD08DF0000-0x00007FFD09180000-memory.dmp
memory/3092-29-0x00007FFD1B8A0000-0x00007FFD1B8B4000-memory.dmp
memory/3092-30-0x00007FFD1B880000-0x00007FFD1B891000-memory.dmp
memory/3092-31-0x00007FFD101C0000-0x00007FFD10292000-memory.dmp
memory/3092-33-0x00007FFD0DB30000-0x00007FFD0DC18000-memory.dmp
memory/3092-36-0x00007FFD1B6D0000-0x00007FFD1B6FF000-memory.dmp
memory/3092-42-0x00007FFD14190000-0x00007FFD141A1000-memory.dmp
memory/3092-41-0x00007FFD14590000-0x00007FFD145A1000-memory.dmp
memory/3092-44-0x00007FFD10120000-0x00007FFD101B8000-memory.dmp
memory/3092-46-0x00007FFD14160000-0x00007FFD14185000-memory.dmp
memory/3092-51-0x00007FFD09180000-0x00007FFD09436000-memory.dmp
memory/3092-50-0x00007FFD03120000-0x00007FFD03365000-memory.dmp
memory/3092-49-0x0000028CEAFA0000-0x0000028CEB330000-memory.dmp
memory/3092-45-0x00007FFD11F40000-0x00007FFD11F8F000-memory.dmp
memory/3092-48-0x00007FFD11F20000-0x00007FFD11F3B000-memory.dmp
memory/3092-47-0x00007FFD0D790000-0x00007FFD0D83B000-memory.dmp
memory/3092-43-0x00007FFD08940000-0x00007FFD08B4B000-memory.dmp
memory/3092-40-0x00007FFD145B0000-0x00007FFD145CA000-memory.dmp
memory/3092-39-0x00007FFD145D0000-0x00007FFD145FD000-memory.dmp
memory/3092-38-0x00007FFD14600000-0x00007FFD14626000-memory.dmp
memory/3092-35-0x00007FFD1B830000-0x00007FFD1B871000-memory.dmp
memory/3092-34-0x00007FFD0DA40000-0x00007FFD0DB23000-memory.dmp
memory/3092-37-0x00007FFD1B290000-0x00007FFD1B2A8000-memory.dmp
memory/3092-32-0x00007FFD08B50000-0x00007FFD08DE6000-memory.dmp