Overview
overview
5Static
static
3PhonerLite64.zip
windows11-ltsc_2024-x64
1CallWaiting.wav
windows11-ltsc_2024-x64
1PhonerLite.exe
windows11-ltsc_2024-x64
1RingIn.wav
windows11-ltsc_2024-x64
1RingInInternal.wav
windows11-ltsc_2024-x64
1WebView2Loader.dll
windows11-ltsc_2024-x64
1licencia.txt
windows11-ltsc_2024-x64
1license.txt
windows11-ltsc_2024-x64
1licença.txt
windows11-ltsc_2024-x64
1lizenz.txt
windows11-ltsc_2024-x64
1provider.ini
windows11-ltsc_2024-x64
1sipper64.dll
windows11-ltsc_2024-x64
5Лицензия.txt
windows11-ltsc_2024-x64
1Ліцензія.txt
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/07/2026, 06:13
Static task
static1
Behavioral task
behavioral1
Sample
PhonerLite64.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral2
Sample
CallWaiting.wav
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
PhonerLite.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral4
Sample
RingIn.wav
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
RingInInternal.wav
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
WebView2Loader.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
licencia.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
license.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
licença.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
lizenz.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
provider.ini
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral12
Sample
sipper64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Лицензия.txt
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral14
Sample
Ліцензія.txt
Resource
win11ltsc2024-20260709-en
General
- Target RingIn.wav
- Size 17KB
- Sample260721-gyrmsshx4v
- SHA256 5e69f6db9bab70d03c27bd76f1ec4c371504b507001a11c5a6a052ca1b70a302
- MD5 1f0a66b2c2c625535bf487e0a8268ddb
- SHA1 8b53ce574527c6b9efb722a98ac6ca347a47f06a
- SHA512 3c4e2808acaad204aa428bd8584646165c42ba1fd2fa0c820ed3b4733d21a5a7c83f46a408f77cd7fa81b7cbfb552ccea559ec7a1b60a9683485902824957ff3
- SSDEEP 384:k6ML9TxJMJAYlokA/dqOKG0WMiRjfd0aVfUoSOhZTngCPq0+4dL:sL99JNYJAFqU1fdBVfUChZTvKO
- TLSH T12782C181B442F4CCCE129FB2BEBD9C4A5662BC342E2D59B230046D15BC66DA3DE5D335
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3340 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3340 vlc.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 3340 vlc.exe 3340 vlc.exe 3340 vlc.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 3340 vlc.exe 3340 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3340 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\RingIn.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3340