Analysis
- geolocation tags
- max time kernel
899s - max time network
912s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
22/07/2026, 03:26
General
- Target 0702.mp4
- Size 209.8MB
- Sample260722-dy8pjavvbv
- SHA256 f7eafe12cef79768b59ae2976e71609ad5a34dbc98f5dfc093882771cef2b9f3
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 25 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\0702.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5140-0-0x00007FFC1C5DD000-0x00007FFC1C5DF000-memory.dmp
memory/5140-1-0x00007FFC1C330000-0x00007FFC1C5E6000-memory.dmp
memory/5140-2-0x00007FFC1C330000-0x00007FFC1C5E6000-memory.dmp
memory/5140-3-0x00007FFC1C330000-0x00007FFC1C5E6000-memory.dmp
memory/5140-8-0x00007FFC1C330000-0x00007FFC1C5E6000-memory.dmp
memory/5140-9-0x00007FFC1C330000-0x00007FFC1C5E6000-memory.dmp
memory/5140-10-0x00007FFC1C330000-0x00007FFC1C5E6000-memory.dmp
memory/5140-12-0x00007FFC1C330000-0x00007FFC1C5E6000-memory.dmp
memory/5140-11-0x00007FFC1C330000-0x00007FFC1C5E6000-memory.dmp
memory/5140-13-0x00007FFC1C330000-0x00007FFC1C5E6000-memory.dmp
memory/5140-14-0x00007FFC1C330000-0x00007FFC1C5E6000-memory.dmp
memory/5140-16-0x00007FFC2FCB0000-0x00007FFC2FCE4000-memory.dmp
memory/5140-22-0x00007FFC24D40000-0x00007FFC24D51000-memory.dmp
memory/5140-24-0x00007FFC23300000-0x00007FFC23311000-memory.dmp
memory/5140-15-0x00007FF797010000-0x00007FF797108000-memory.dmp
memory/5140-18-0x00007FFC307B0000-0x00007FFC307C8000-memory.dmp
memory/5140-19-0x00007FFC303C0000-0x00007FFC303D7000-memory.dmp
memory/5140-20-0x00007FFC2E990000-0x00007FFC2E9A1000-memory.dmp
memory/5140-21-0x00007FFC2A1B0000-0x00007FFC2A1C7000-memory.dmp
memory/5140-23-0x00007FFC248F0000-0x00007FFC2490D000-memory.dmp
memory/5140-25-0x00007FFC22AD0000-0x00007FFC22CDB000-memory.dmp
memory/5140-39-0x00007FFC1C1F0000-0x00007FFC1C201000-memory.dmp
memory/5140-27-0x00007FFC232B0000-0x00007FFC232F1000-memory.dmp
memory/5140-28-0x00007FFC23280000-0x00007FFC232A1000-memory.dmp
memory/5140-40-0x00007FFC1A950000-0x00007FFC1A9A7000-memory.dmp
memory/5140-38-0x00007FFC1C210000-0x00007FFC1C28C000-memory.dmp
memory/5140-37-0x00007FFC1C290000-0x00007FFC1C2F7000-memory.dmp
memory/5140-36-0x00007FFC1C300000-0x00007FFC1C330000-memory.dmp
memory/5140-35-0x00007FFC1F150000-0x00007FFC1F168000-memory.dmp
memory/5140-34-0x00007FFC1F170000-0x00007FFC1F181000-memory.dmp
memory/5140-33-0x00007FFC1F190000-0x00007FFC1F1AB000-memory.dmp
memory/5140-32-0x00007FFC20970000-0x00007FFC20981000-memory.dmp
memory/5140-31-0x00007FFC20990000-0x00007FFC209A1000-memory.dmp
memory/5140-30-0x00007FFC21980000-0x00007FFC21991000-memory.dmp
memory/5140-29-0x00007FFC23260000-0x00007FFC23278000-memory.dmp
memory/5140-26-0x00007FFC16E10000-0x00007FFC17EC0000-memory.dmp
memory/5140-41-0x0000020B15660000-0x0000020B157E0000-memory.dmp
memory/5140-53-0x00007FFC16E10000-0x00007FFC17EC0000-memory.dmp
memory/5140-80-0x00007FFC16E10000-0x00007FFC17EC0000-memory.dmp
memory/5140-98-0x00007FFC1C330000-0x00007FFC1C5E6000-memory.dmp
memory/5140-107-0x00007FFC16E10000-0x00007FFC17EC0000-memory.dmp
memory/5140-188-0x00007FFC16E10000-0x00007FFC17EC0000-memory.dmp
memory/5140-269-0x00007FFC16E10000-0x00007FFC17EC0000-memory.dmp
memory/5140-296-0x00007FFC16E10000-0x00007FFC17EC0000-memory.dmp
memory/5140-323-0x00007FFC16E10000-0x00007FFC17EC0000-memory.dmp
memory/5140-350-0x00007FFC16E10000-0x00007FFC17EC0000-memory.dmp