Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
24/07/2026, 02:34
General
- Target Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- LIGHT LEAK Overlay.mov
- Size 994KB
- Sample260724-c2sbaaeb99
- SHA256 3cef0918aae842a66b53c2be531eb3a837f354f96bb4b78aa515adf02f93b609
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 25 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Ryanherrick - ULTIMATE STARTER PACK\ESSENTIAL OL\RH- LIGHT LEAK Overlay.mov"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1388-0-0x00007FFE2ACBD000-0x00007FFE2ACBF000-memory.dmp
memory/1388-1-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-2-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-3-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-4-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-6-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-5-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-9-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-8-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-7-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-10-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-11-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-13-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-12-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-14-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-15-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-16-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-17-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-22-0x00007FFE2AA10000-0x00007FFE2ACC6000-memory.dmp
memory/1388-24-0x00007FFE2ACD0000-0x00007FFE2AD04000-memory.dmp
memory/1388-29-0x00007FFE244B0000-0x00007FFE244DB000-memory.dmp
memory/1388-32-0x00007FFE24E80000-0x00007FFE24E91000-memory.dmp
memory/1388-33-0x00007FFE1D6C0000-0x00007FFE1D792000-memory.dmp
memory/1388-30-0x00007FFE195E0000-0x00007FFE19970000-memory.dmp
memory/1388-44-0x00007FFE20F70000-0x00007FFE20F81000-memory.dmp
memory/1388-52-0x0000018E14FF0000-0x0000018E15009000-memory.dmp
memory/1388-53-0x0000018E16EF0000-0x0000018E17001000-memory.dmp
memory/1388-54-0x00007FFE13340000-0x00007FFE13585000-memory.dmp
memory/1388-51-0x0000018E14FD0000-0x0000018E14FE1000-memory.dmp
memory/1388-50-0x00007FFE1D560000-0x00007FFE1D57B000-memory.dmp
memory/1388-49-0x00007FFE1B410000-0x00007FFE1B4BB000-memory.dmp
memory/1388-48-0x00007FFE20F40000-0x00007FFE20F65000-memory.dmp
memory/1388-47-0x00007FFE1D580000-0x00007FFE1D5CF000-memory.dmp
memory/1388-46-0x00007FFE1B530000-0x00007FFE1B5C8000-memory.dmp
memory/1388-45-0x00007FFE19130000-0x00007FFE1933B000-memory.dmp
memory/1388-35-0x00007FFE1D5D0000-0x00007FFE1D6B8000-memory.dmp
memory/1388-43-0x00007FFE20F90000-0x00007FFE20FA1000-memory.dmp
memory/1388-41-0x00007FFE20FB0000-0x00007FFE20FDD000-memory.dmp
memory/1388-36-0x00007FFE1B5D0000-0x00007FFE1B6B3000-memory.dmp
memory/1388-34-0x00007FFE19340000-0x00007FFE195D6000-memory.dmp
memory/1388-42-0x00007FFE22810000-0x00007FFE2282A000-memory.dmp
memory/1388-39-0x00007FFE24410000-0x00007FFE24428000-memory.dmp
memory/1388-40-0x00007FFE22830000-0x00007FFE22856000-memory.dmp
memory/1388-37-0x00007FFE24460000-0x00007FFE244A1000-memory.dmp
memory/1388-38-0x00007FFE24430000-0x00007FFE2445F000-memory.dmp
memory/1388-31-0x00007FFE265C0000-0x00007FFE265D4000-memory.dmp
memory/1388-28-0x00007FFE2A980000-0x00007FFE2A9A2000-memory.dmp
memory/1388-26-0x00007FFE31B30000-0x00007FFE31B41000-memory.dmp
memory/1388-23-0x00007FF7EEC00000-0x00007FF7EECF8000-memory.dmp
memory/1388-27-0x00007FFE2A9B0000-0x00007FFE2A9C9000-memory.dmp