Overview
overview
5Static
static
3PhonerLite64.zip
windows11-ltsc_2024-x64
1CallWaiting.wav
windows11-ltsc_2024-x64
1PhonerLite.exe
windows11-ltsc_2024-x64
1RingIn.wav
windows11-ltsc_2024-x64
1RingInInternal.wav
windows11-ltsc_2024-x64
1WebView2Loader.dll
windows11-ltsc_2024-x64
1licencia.txt
windows11-ltsc_2024-x64
1license.txt
windows11-ltsc_2024-x64
1licença.txt
windows11-ltsc_2024-x64
1lizenz.txt
windows11-ltsc_2024-x64
1provider.ini
windows11-ltsc_2024-x64
1sipper64.dll
windows11-ltsc_2024-x64
5Лицензия.txt
windows11-ltsc_2024-x64
1Ліцензія.txt
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/07/2026, 06:13
Static task
static1
Behavioral task
behavioral1
Sample
PhonerLite64.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral2
Sample
CallWaiting.wav
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
PhonerLite.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral4
Sample
RingIn.wav
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
RingInInternal.wav
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
WebView2Loader.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
licencia.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
license.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
licença.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
lizenz.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
provider.ini
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral12
Sample
sipper64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Лицензия.txt
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral14
Sample
Ліцензія.txt
Resource
win11ltsc2024-20260709-en
General
- Target RingInInternal.wav
- Size 15KB
- Sample260721-gyrmsshx4v
- SHA256 4f5226b930373cafb62e6596c0c8db43e724ca6adaaaed69322d5e54c0367344
- MD5 63def6439c8f078d295213cb6c3df646
- SHA1 a59e2e6157abe3abbbbad134ebc4c850ca463759
- SHA512 bc45e8bc3253211792ce24e52701a6fa02a3172339af11852775009aa249886ff3e5027b2c875f7aebc0a922cd0ebe9162eaea1828e4eb700f759790b6828e3b
- SSDEEP 384:Ss7TgyhEyQLi15lJT/d/4BEeC9zOXJuvpHd9cX+rFI4YzSUnpARJlPKkMk:f7TgyhEy2iHFQBEeC9wud9cMFNACHlP1
- TLSH T1A97249647746EC46C845383EA98AC2E86B37BF95AF01920770A2B77B1B7D8115CDE1C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 5512 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5512 vlc.exe - Suspicious use of FindShellTrayWindow 8 IoCs
pid Process 5512 vlc.exe 5512 vlc.exe 5512 vlc.exe 5512 vlc.exe 5512 vlc.exe 5512 vlc.exe 5512 vlc.exe 5512 vlc.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 5512 vlc.exe 5512 vlc.exe 5512 vlc.exe 5512 vlc.exe 5512 vlc.exe 5512 vlc.exe 5512 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5512 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\RingInInternal.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:5512