Analysis
- max time kernel
148s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/07/2026, 23:56
Static task
static1
Behavioral task
behavioral1
Sample
Candle In The Wind 1997.mp3
Resource
win11-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Candle In The Wind 1997.mp3
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Candle In The Wind 1997.mp3
Resource
android-x64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Candle In The Wind 1997.mp3
Resource
android-x64-arm64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Candle In The Wind 1997.mp3
Resource
macos-20250619-en
0 signatures
150 seconds
General
- Target Candle In The Wind 1997.mp3
- Size 9.6MB
- Sample260717-3y5ejsdw2x
- SHA256 4471c209c7fe37cfcb218ed180c172a630be51874b7e422d1477bf120c2aaca4
- MD5 70c0d2ddcbac23c007a138e8a5bd2522
- SHA1 2dbac7ce933392d2493886986450d41f645d5f84
- SHA512 712ba1a1644b9d0c291b4c5b470ea6a610a61b60259a027eafa15b42ebfd8f1701cff0f0583c9b33ee847c61086ed595417c531be782e9f1de9335cf783231c5
- SSDEEP 196608:P9Sy0/WoT6h+ff/j1szinS+reuvRuVdXLQF:lSyDh+PyinSge0Ru/Y
- TLSH T143A63340A3107A7EF5848E38FFB34B79DBA96DDF2814AED3A9A8B772213B5004744547
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3360 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3360 vlc.exe - Suspicious use of FindShellTrayWindow 6 IoCs
pid Process 3360 vlc.exe 3360 vlc.exe 3360 vlc.exe 3360 vlc.exe 3360 vlc.exe 3360 vlc.exe - Suspicious use of SendNotifyMessage 5 IoCs
pid Process 3360 vlc.exe 3360 vlc.exe 3360 vlc.exe 3360 vlc.exe 3360 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3360 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Candle In The Wind 1997.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3360