Analysis
- max time kernel
149s - max time network
162s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
24/07/2026, 02:34
General
- Target Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- LIGHT LEAK BG.mov
- Size 15.4MB
- Sample260724-c2sbaaeb99
- SHA256 54326465eec3db72d84f8ab44d7fc4fa33508fe34e2b01b43ecb941e97bbcf76
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 25 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Ryanherrick - ULTIMATE STARTER PACK\ESSENTIAL OL\RH- LIGHT LEAK BG.mov"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4284-0-0x00007FFEBFD7D000-0x00007FFEBFD7F000-memory.dmp
memory/4284-1-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-2-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-3-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-4-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-5-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-8-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-6-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-7-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-9-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-10-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-12-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-11-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-14-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-19-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-18-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-17-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-16-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-15-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-13-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-20-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-21-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-23-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-22-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-31-0x00007FFECF4C0000-0x00007FFECF4D1000-memory.dmp
memory/4284-32-0x00007FFECF4A0000-0x00007FFECF4B9000-memory.dmp
memory/4284-30-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-35-0x00007FFEBCAD0000-0x00007FFEBCE60000-memory.dmp
memory/4284-28-0x00007FF787540000-0x00007FF787638000-memory.dmp
memory/4284-29-0x00007FFECF520000-0x00007FFECF554000-memory.dmp
memory/4284-33-0x00007FFECE2E0000-0x00007FFECE302000-memory.dmp
memory/4284-36-0x00007FFECE290000-0x00007FFECE2A4000-memory.dmp
memory/4284-34-0x00007FFECE2B0000-0x00007FFECE2DB000-memory.dmp
memory/4284-38-0x00007FFECDE90000-0x00007FFECDF62000-memory.dmp
memory/4284-37-0x00007FFECE270000-0x00007FFECE281000-memory.dmp
memory/4284-39-0x00007FFEBC830000-0x00007FFEBCAC6000-memory.dmp
memory/4284-41-0x00007FFEC0AB0000-0x00007FFEC0B93000-memory.dmp
memory/4284-40-0x00007FFEC78E0000-0x00007FFEC79C8000-memory.dmp
memory/4284-45-0x00007FFECDDC0000-0x00007FFECDDE6000-memory.dmp
memory/4284-51-0x00007FFEC1200000-0x00007FFEC1298000-memory.dmp
memory/4284-54-0x00007FFEC0A00000-0x00007FFEC0AAB000-memory.dmp
memory/4284-56-0x00007FFEB66E0000-0x00007FFEB6925000-memory.dmp
memory/4284-55-0x00007FFEC5BA0000-0x00007FFEC5BBB000-memory.dmp
memory/4284-53-0x00007FFEC5E00000-0x00007FFEC5E25000-memory.dmp
memory/4284-52-0x00007FFEC7320000-0x00007FFEC736F000-memory.dmp
memory/4284-50-0x00007FFEBF670000-0x00007FFEBF87B000-memory.dmp
memory/4284-44-0x00007FFECDF80000-0x00007FFECDF98000-memory.dmp
memory/4284-48-0x00007FFEC8050000-0x00007FFEC8061000-memory.dmp
memory/4284-49-0x00007FFEC8030000-0x00007FFEC8041000-memory.dmp
memory/4284-46-0x00007FFECDD90000-0x00007FFECDDBD000-memory.dmp
memory/4284-47-0x00007FFECBCD0000-0x00007FFECBCEA000-memory.dmp
memory/4284-42-0x00007FFECDE40000-0x00007FFECDE81000-memory.dmp
memory/4284-43-0x00007FFECDDF0000-0x00007FFECDE1F000-memory.dmp
memory/4284-57-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp
memory/4284-58-0x00007FFEBFAD0000-0x00007FFEBFD86000-memory.dmp