Analysis
- user interaction
yes - max time kernel
441s - max time network
431s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
23/07/2026, 08:55
Errors
General
- Target Roblox-2026-04-23T07_38_11.692Z.mp4
- Size 29.2MB
- Sample260723-kvsbpsy1ex
- SHA256 b37e11b9a4958cad5ecca747d9c90fcf44fbdbd207e6e7efc8d56e81f096236c
Malware Config
Signatures
- Checks SCSI registry key(s) 3 TTPs 3 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious behavior: GetForegroundWindowSpam 2 IoCs
- Suspicious use of AdjustPrivilegeToken 3 IoCs
- Suspicious use of FindShellTrayWindow 64 IoCs
- Suspicious use of SendNotifyMessage 55 IoCs
- Suspicious use of SetWindowsHookEx 15 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Roblox-2026-04-23T07_38_11.692Z.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /01⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4960-1248-0x0000013EF13A0000-0x0000013EF13A1000-memory.dmp
memory/4960-1246-0x0000013EF13A0000-0x0000013EF13A1000-memory.dmp
memory/4960-1256-0x0000013EF13A0000-0x0000013EF13A1000-memory.dmp
memory/4960-1257-0x0000013EF13A0000-0x0000013EF13A1000-memory.dmp
memory/4960-1252-0x0000013EF13A0000-0x0000013EF13A1000-memory.dmp
memory/4960-1253-0x0000013EF13A0000-0x0000013EF13A1000-memory.dmp
memory/4960-1254-0x0000013EF13A0000-0x0000013EF13A1000-memory.dmp
memory/4960-1255-0x0000013EF13A0000-0x0000013EF13A1000-memory.dmp
memory/6072-30-0x00007FFB22150000-0x00007FFB22184000-memory.dmp
memory/6072-48-0x00007FFB14780000-0x00007FFB1479A000-memory.dmp
memory/6072-47-0x00007FFB14300000-0x00007FFB1432D000-memory.dmp
memory/6072-6-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-7-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-9-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-8-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-11-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-12-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-10-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-13-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-14-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-16-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-15-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-17-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-18-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-19-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-20-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-21-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-26-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-27-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-28-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-37-0x00007FFB16BF0000-0x00007FFB16C04000-memory.dmp
memory/6072-38-0x00007FFB16BD0000-0x00007FFB16BE1000-memory.dmp
memory/6072-35-0x00007FFB1EBA0000-0x00007FFB1EBCB000-memory.dmp
memory/6072-34-0x00007FFB20390000-0x00007FFB203B2000-memory.dmp
memory/6072-33-0x00007FFB238A0000-0x00007FFB238B9000-memory.dmp
memory/6072-32-0x00007FFB240F0000-0x00007FFB24101000-memory.dmp
memory/6072-3-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-31-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-45-0x00007FFB15780000-0x00007FFB15798000-memory.dmp
memory/6072-46-0x00007FFB147A0000-0x00007FFB147C6000-memory.dmp
memory/6072-5-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-4-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-36-0x00007FFB0B670000-0x00007FFB0BA00000-memory.dmp
memory/6072-50-0x00007FFB142C0000-0x00007FFB142D1000-memory.dmp
memory/6072-40-0x00007FFB0B3D0000-0x00007FFB0B666000-memory.dmp
memory/6072-57-0x000001EF7B9E0000-0x000001EF7BD70000-memory.dmp
memory/6072-58-0x00007FFB05350000-0x00007FFB05595000-memory.dmp
memory/6072-59-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-51-0x00007FFB0B1C0000-0x00007FFB0B3CB000-memory.dmp
memory/6072-44-0x00007FFB147D0000-0x00007FFB147FF000-memory.dmp
memory/6072-39-0x00007FFB16AF0000-0x00007FFB16BC2000-memory.dmp
memory/6072-56-0x00007FFB133A0000-0x00007FFB133BB000-memory.dmp
memory/6072-55-0x00007FFB0D890000-0x00007FFB0D93B000-memory.dmp
memory/6072-54-0x00007FFB14290000-0x00007FFB142B5000-memory.dmp
memory/6072-49-0x00007FFB142E0000-0x00007FFB142F1000-memory.dmp
memory/6072-43-0x00007FFB16AA0000-0x00007FFB16AE1000-memory.dmp
memory/6072-29-0x00007FF681010000-0x00007FF681108000-memory.dmp
memory/6072-41-0x00007FFB0FB70000-0x00007FFB0FC58000-memory.dmp
memory/6072-42-0x00007FFB0DC90000-0x00007FFB0DD73000-memory.dmp
memory/6072-52-0x00007FFB0FAD0000-0x00007FFB0FB68000-memory.dmp
memory/6072-53-0x00007FFB0DC40000-0x00007FFB0DC8F000-memory.dmp
memory/6072-60-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-61-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-62-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-63-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-64-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-2-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-1-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-0-0x00007FFB0C4FD000-0x00007FFB0C4FF000-memory.dmp
memory/6072-67-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-97-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp
memory/6072-1243-0x00007FF681010000-0x00007FF681108000-memory.dmp
memory/6072-1244-0x00007FFB22150000-0x00007FFB22184000-memory.dmp
memory/6072-1245-0x00007FFB0C250000-0x00007FFB0C506000-memory.dmp