Analysis
- user interaction
yes - max time kernel
148s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/07/2026, 01:26
Static task
static1
Behavioral task
behavioral1
Sample
piggy infection mode.mp3
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
piggy infection mode.mp3
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
General
- Target piggy infection mode.mp3
- Size 712KB
- Sample260723-bthlfaeg93
- SHA256 2649ccb02509e2b731fca1f6efc2d8bb0127f2591a5cfb927661c90eb3b3f27b
- MD5 c609282abc838aa115fb6d01d85ab06e
- SHA1 21e620f64ba11741d454d76205b3991622612cad
- SHA512 25e0078aba2643a58264b622a6ce5c383367bfc5620832ad0549a9d09950a9accc1f3ba0464a78f9a6f78f961075aa976398eceb112cda640be4946a96effbba
- SSDEEP 12288:9WfSmNrh7gcKFKuhZOVnATelOoqtVoeH4mGMjIrCRNRit54iXFq0:UfZthUcrufOVgJoqtCeHzrRFMFq0
- TLSH T101F423A76F42F16F394B29EE73476074E6483F4AF071C0D4A82AF255B6BF8944344E0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1728 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1728 vlc.exe - Suspicious use of FindShellTrayWindow 9 IoCs
pid Process 1728 vlc.exe 1728 vlc.exe 1728 vlc.exe 1728 vlc.exe 1728 vlc.exe 1728 vlc.exe 1728 vlc.exe 1728 vlc.exe 1728 vlc.exe - Suspicious use of SendNotifyMessage 8 IoCs
pid Process 1728 vlc.exe 1728 vlc.exe 1728 vlc.exe 1728 vlc.exe 1728 vlc.exe 1728 vlc.exe 1728 vlc.exe 1728 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1728 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\piggy infection mode.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1728