Overview
overview
5Static
static
3PhonerLite64.zip
windows11-ltsc_2024-x64
1CallWaiting.wav
windows11-ltsc_2024-x64
1PhonerLite.exe
windows11-ltsc_2024-x64
1RingIn.wav
windows11-ltsc_2024-x64
1RingInInternal.wav
windows11-ltsc_2024-x64
1WebView2Loader.dll
windows11-ltsc_2024-x64
1licencia.txt
windows11-ltsc_2024-x64
1license.txt
windows11-ltsc_2024-x64
1licença.txt
windows11-ltsc_2024-x64
1lizenz.txt
windows11-ltsc_2024-x64
1provider.ini
windows11-ltsc_2024-x64
1sipper64.dll
windows11-ltsc_2024-x64
5Лицензия.txt
windows11-ltsc_2024-x64
1Ліцензія.txt
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/07/2026, 06:13
Static task
static1
Behavioral task
behavioral1
Sample
PhonerLite64.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral2
Sample
CallWaiting.wav
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
PhonerLite.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral4
Sample
RingIn.wav
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
RingInInternal.wav
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
WebView2Loader.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
licencia.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
license.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
licença.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
lizenz.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
provider.ini
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral12
Sample
sipper64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Лицензия.txt
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral14
Sample
Ліцензія.txt
Resource
win11ltsc2024-20260709-en
General
- Target CallWaiting.wav
- Size 15KB
- Sample260721-gyrmsshx4v
- SHA256 bafd5c9c37e53bc5b54769bf4f02304c769c1c7613e70ea648cf3d8fb88f50ec
- MD5 c88bbbf018c2327562742a5f9604858d
- SHA1 f84fbaa4ea8c8baa16e9c61ca4524616c5afbb35
- SHA512 0cc6ff1f59e2f7a988c5c2fd900368ab637377b47de8fff0e07feb27a45e672635408b3dc94bf2e07bf4fb393a837929f1d07eb0118d40bd7f6150fea678c25d
- SSDEEP 192:3IiqVQh4aowmNOo0hcWWyufIqlK3mxfVw4AgzQ:32ZXN+hcnyuQqlK3mxf+EQ
- TLSH T15D623EE1DE1C48169A923CBAC96B1ECA77314ECD91DC11C225E5BD1C9A97CF2C8072A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 5516 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5516 vlc.exe - Suspicious use of FindShellTrayWindow 8 IoCs
pid Process 5516 vlc.exe 5516 vlc.exe 5516 vlc.exe 5516 vlc.exe 5516 vlc.exe 5516 vlc.exe 5516 vlc.exe 5516 vlc.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 5516 vlc.exe 5516 vlc.exe 5516 vlc.exe 5516 vlc.exe 5516 vlc.exe 5516 vlc.exe 5516 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5516 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\CallWaiting.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:5516