Analysis
- user interaction
yes - max time kernel
24s - max time network
27s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/07/2026, 00:51
Static task
static1
Behavioral task
behavioral1
Sample
bôa - Duvet - (256 Kbps).mp3
Resource
win10v2004-20260513-en
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
bôa - Duvet - (256 Kbps).mp3
Resource
win11ltsc2024-20260710-en
5 signatures
900 seconds
General
- Target bôa - Duvet - (256 Kbps).mp3
- Size 6.9MB
- Sample260718-a7jj8aey3s
- SHA256 fb60c3fad65f2507f46593ab4169ff9c71d2376173fb8fbee751cb17529d4f44
- MD5 b8c4923d2e233791b908289c42aee434
- SHA1 ff4f458c6bc5cb5ac4ae95b8ec7de70d5fbf7dda
- SHA512 d95b60b1fa73a15feb347064dcc44c5709bd64d76095e0b4e1b2da0648f2ab9cb748beae0495a93271f167e0e0098a31278a30a3b99a5b7cec1a8a01e954aeae
- SSDEEP 98304:k2gmKeHYHU7ToKKK881R+CQLnG33owF+EdS7I9ZBGl0N+kLGboOiFqjq098:k2dKe40qK8KRHVYwroePLamOT8
- TLSH T12E76331FD22065DAF29BA6752C41069CFE2A8F397A04628ACDD5B723D0F7348F150E79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4892 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4892 vlc.exe - Suspicious use of FindShellTrayWindow 10 IoCs
pid Process 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe - Suspicious use of SendNotifyMessage 9 IoCs
pid Process 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe 4892 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4892 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\bôa - Duvet - (256 Kbps).mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4892