Analysis
- geolocation tags
- max time kernel
900s - max time network
483s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
19/07/2026, 03:45
General
- Target 0702.mp4
- Size 209.8MB
- Sample260719-ea6eyaa19j
- SHA256 f7eafe12cef79768b59ae2976e71609ad5a34dbc98f5dfc093882771cef2b9f3
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 27 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\0702.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5372-0-0x00007FFBE72BD000-0x00007FFBE72BF000-memory.dmp
memory/5372-1-0x00007FFBE7010000-0x00007FFBE72C6000-memory.dmp
memory/5372-2-0x00007FFBE7010000-0x00007FFBE72C6000-memory.dmp
memory/5372-3-0x00007FFBE7010000-0x00007FFBE72C6000-memory.dmp
memory/5372-8-0x00007FFBE7010000-0x00007FFBE72C6000-memory.dmp
memory/5372-10-0x00007FFBE7010000-0x00007FFBE72C6000-memory.dmp
memory/5372-9-0x00007FFBE7010000-0x00007FFBE72C6000-memory.dmp
memory/5372-11-0x00007FFBE7010000-0x00007FFBE72C6000-memory.dmp
memory/5372-12-0x00007FFBE7010000-0x00007FFBE72C6000-memory.dmp
memory/5372-13-0x00007FFBE7010000-0x00007FFBE72C6000-memory.dmp
memory/5372-14-0x00007FFBE7010000-0x00007FFBE72C6000-memory.dmp
memory/5372-22-0x00007FFBF47E0000-0x00007FFBF47F1000-memory.dmp
memory/5372-15-0x00007FF79EA50000-0x00007FF79EB48000-memory.dmp
memory/5372-20-0x00007FFBF90F0000-0x00007FFBF9101000-memory.dmp
memory/5372-16-0x00007FFBFAD00000-0x00007FFBFAD34000-memory.dmp
memory/5372-18-0x00007FFBF95B0000-0x00007FFBF95C8000-memory.dmp
memory/5372-17-0x00007FFBE7010000-0x00007FFBE72C6000-memory.dmp
memory/5372-19-0x00007FFBF9170000-0x00007FFBF9187000-memory.dmp
memory/5372-21-0x00007FFBF4800000-0x00007FFBF4817000-memory.dmp
memory/5372-26-0x00007FFBF2AB0000-0x00007FFBF2AF1000-memory.dmp
memory/5372-25-0x00007FFBE0C90000-0x00007FFBE0E9B000-memory.dmp
memory/5372-37-0x00007FFBE94B0000-0x00007FFBE9517000-memory.dmp
memory/5372-40-0x00007FFBE9450000-0x00007FFBE94A7000-memory.dmp
memory/5372-27-0x000001F003E80000-0x000001F004F30000-memory.dmp
memory/5372-39-0x00007FFBE9650000-0x00007FFBE9661000-memory.dmp
memory/5372-38-0x00007FFBE7620000-0x00007FFBE769C000-memory.dmp
memory/5372-36-0x00007FFBE9980000-0x00007FFBE99B0000-memory.dmp
memory/5372-35-0x00007FFBE99B0000-0x00007FFBE99C8000-memory.dmp
memory/5372-34-0x00007FFBECA00000-0x00007FFBECA11000-memory.dmp
memory/5372-33-0x00007FFBECA20000-0x00007FFBECA3B000-memory.dmp
memory/5372-32-0x00007FFBECA40000-0x00007FFBECA51000-memory.dmp
memory/5372-31-0x00007FFBECA60000-0x00007FFBECA71000-memory.dmp
memory/5372-30-0x00007FFBECA80000-0x00007FFBECA91000-memory.dmp
memory/5372-29-0x00007FFBECAA0000-0x00007FFBECAB8000-memory.dmp
memory/5372-28-0x00007FFBF2A80000-0x00007FFBF2AA1000-memory.dmp
memory/5372-24-0x00007FFBF4500000-0x00007FFBF4511000-memory.dmp
memory/5372-23-0x00007FFBF47C0000-0x00007FFBF47DD000-memory.dmp
memory/5372-53-0x000001F003E80000-0x000001F004F30000-memory.dmp
memory/5372-79-0x000001F003E80000-0x000001F004F30000-memory.dmp
memory/5372-95-0x00007FFBE7010000-0x00007FFBE72C6000-memory.dmp
memory/5372-105-0x000001F003E80000-0x000001F004F30000-memory.dmp
memory/5372-183-0x000001F003E80000-0x000001F004F30000-memory.dmp
memory/5372-235-0x000001F003E80000-0x000001F004F30000-memory.dmp
memory/5372-261-0x000001F003E80000-0x000001F004F30000-memory.dmp
memory/5372-313-0x000001F003E80000-0x000001F004F30000-memory.dmp
memory/5372-339-0x000001F003E80000-0x000001F004F30000-memory.dmp