Analysis
- geolocation tags
- max time kernel
899s - max time network
477s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
22/07/2026, 01:00
General
- Target 0702(1).mp4
- Size 174.2MB
- Sample260722-bc3kaatvct
- SHA256 e2a5160cf8044d79fad72dabd1db73679e76c762d973eb397b75baa7b9e3d75d
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 25 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\0702(1).mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5452-0-0x00007FF9FE61D000-0x00007FF9FE61F000-memory.dmp
memory/5452-1-0x00007FF9FE370000-0x00007FF9FE626000-memory.dmp
memory/5452-2-0x00007FF9FE370000-0x00007FF9FE626000-memory.dmp
memory/5452-3-0x00007FF9FE370000-0x00007FF9FE626000-memory.dmp
memory/5452-8-0x00007FF9FE370000-0x00007FF9FE626000-memory.dmp
memory/5452-9-0x00007FF9FE370000-0x00007FF9FE626000-memory.dmp
memory/5452-10-0x00007FF9FE370000-0x00007FF9FE626000-memory.dmp
memory/5452-11-0x00007FF9FE370000-0x00007FF9FE626000-memory.dmp
memory/5452-12-0x00007FF9FE370000-0x00007FF9FE626000-memory.dmp
memory/5452-13-0x00007FF9FE370000-0x00007FF9FE626000-memory.dmp
memory/5452-14-0x00007FF9FE370000-0x00007FF9FE626000-memory.dmp
memory/5452-18-0x00007FFA140D0000-0x00007FFA140E8000-memory.dmp
memory/5452-19-0x00007FFA0EE10000-0x00007FFA0EE27000-memory.dmp
memory/5452-26-0x00007FFA06C70000-0x00007FFA06CB1000-memory.dmp
memory/5452-25-0x00007FF9FC030000-0x00007FF9FC23B000-memory.dmp
memory/5452-15-0x00007FF684380000-0x00007FF684478000-memory.dmp
memory/5452-23-0x00007FFA07110000-0x00007FFA0712D000-memory.dmp
memory/5452-24-0x00007FFA06CC0000-0x00007FFA06CD1000-memory.dmp
memory/5452-21-0x00007FFA0CED0000-0x00007FFA0CEE7000-memory.dmp
memory/5452-22-0x00007FFA08E90000-0x00007FFA08EA1000-memory.dmp
memory/5452-20-0x00007FFA0DC30000-0x00007FFA0DC41000-memory.dmp
memory/5452-16-0x00007FFA07130000-0x00007FFA07164000-memory.dmp
memory/5452-29-0x00007FFA06C20000-0x00007FFA06C38000-memory.dmp
memory/5452-40-0x00007FF9FF060000-0x00007FF9FF0B7000-memory.dmp
memory/5452-27-0x0000020BB8030000-0x0000020BB90E0000-memory.dmp
memory/5452-39-0x00007FFA00790000-0x00007FFA007A1000-memory.dmp
memory/5452-36-0x00007FFA03760000-0x00007FFA03790000-memory.dmp
memory/5452-34-0x00007FFA04680000-0x00007FFA04691000-memory.dmp
memory/5452-33-0x00007FFA046A0000-0x00007FFA046BB000-memory.dmp
memory/5452-32-0x00007FFA046C0000-0x00007FFA046D1000-memory.dmp
memory/5452-31-0x00007FFA04B00000-0x00007FFA04B11000-memory.dmp
memory/5452-30-0x00007FFA04B20000-0x00007FFA04B31000-memory.dmp
memory/5452-28-0x00007FFA06C40000-0x00007FFA06C61000-memory.dmp
memory/5452-38-0x00007FF9FF0C0000-0x00007FF9FF13C000-memory.dmp
memory/5452-37-0x00007FFA036F0000-0x00007FFA03757000-memory.dmp
memory/5452-35-0x00007FFA045C0000-0x00007FFA045D8000-memory.dmp
memory/5452-41-0x00007FF9FE370000-0x00007FF9FE626000-memory.dmp
memory/5452-44-0x00007FF9FE370000-0x00007FF9FE626000-memory.dmp
memory/5452-54-0x0000020BB8030000-0x0000020BB90E0000-memory.dmp
memory/5452-70-0x00007FF9FE370000-0x00007FF9FE626000-memory.dmp
memory/5452-80-0x0000020BB8030000-0x0000020BB90E0000-memory.dmp
memory/5452-106-0x0000020BB8030000-0x0000020BB90E0000-memory.dmp
memory/5452-184-0x0000020BB8030000-0x0000020BB90E0000-memory.dmp
memory/5452-210-0x0000020BB8030000-0x0000020BB90E0000-memory.dmp
memory/5452-236-0x0000020BB8030000-0x0000020BB90E0000-memory.dmp
memory/5452-262-0x0000020BB8030000-0x0000020BB90E0000-memory.dmp