Analysis
- max time kernel
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
24/07/2026, 02:34
General
- Target Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- NOISE.mov
- Size 10.3MB
- Sample260724-c2sbaaeb99
- SHA256 bafe6db8f048aa7ed31c92d8651b5127ca141b749d7d08c98a2714e94ac4c74e
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 25 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Ryanherrick - ULTIMATE STARTER PACK\ESSENTIAL OL\RH- NOISE.mov"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4428-0-0x00007FFB0DABD000-0x00007FFB0DABF000-memory.dmp
memory/4428-1-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-2-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-4-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-3-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-5-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-6-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-9-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-8-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-7-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-10-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-11-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-12-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-13-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-14-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-20-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-19-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-21-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-23-0x00007FFB11540000-0x00007FFB11574000-memory.dmp
memory/4428-28-0x00007FFB15BD0000-0x00007FFB15BFB000-memory.dmp
memory/4428-24-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp
memory/4428-27-0x00007FFB15DA0000-0x00007FFB15DC2000-memory.dmp
memory/4428-29-0x00007FFB0CD00000-0x00007FFB0D090000-memory.dmp
memory/4428-32-0x00007FFB0DFD0000-0x00007FFB0E0A2000-memory.dmp
memory/4428-33-0x00007FFB0CA60000-0x00007FFB0CCF6000-memory.dmp
memory/4428-44-0x00007FFB0C760000-0x00007FFB0C96B000-memory.dmp
memory/4428-46-0x00007FFB0C670000-0x00007FFB0C6BF000-memory.dmp
memory/4428-47-0x00007FFB0C640000-0x00007FFB0C665000-memory.dmp
memory/4428-45-0x00007FFB0C6C0000-0x00007FFB0C758000-memory.dmp
memory/4428-35-0x00007FFB0C970000-0x00007FFB0CA53000-memory.dmp
memory/4428-43-0x00007FFB0E370000-0x00007FFB0E381000-memory.dmp
memory/4428-42-0x00007FFB0E390000-0x00007FFB0E3A1000-memory.dmp
memory/4428-41-0x00007FFB11050000-0x00007FFB1106A000-memory.dmp
memory/4428-40-0x00007FFB0E400000-0x00007FFB0E42D000-memory.dmp
memory/4428-39-0x00007FFB0E430000-0x00007FFB0E456000-memory.dmp
memory/4428-38-0x00007FFB13790000-0x00007FFB137A8000-memory.dmp
memory/4428-37-0x00007FFB145B0000-0x00007FFB145DF000-memory.dmp
memory/4428-36-0x00007FFB11470000-0x00007FFB114B1000-memory.dmp
memory/4428-34-0x00007FFB0D720000-0x00007FFB0D808000-memory.dmp
memory/4428-31-0x00007FFB15DF0000-0x00007FFB15E01000-memory.dmp
memory/4428-30-0x00007FFB1A160000-0x00007FFB1A174000-memory.dmp
memory/4428-22-0x00007FF7D0D80000-0x00007FF7D0E78000-memory.dmp
memory/4428-26-0x00007FFB1DE80000-0x00007FFB1DE99000-memory.dmp
memory/4428-25-0x00007FFB1F630000-0x00007FFB1F641000-memory.dmp
memory/4428-49-0x00007FFB0C570000-0x00007FFB0C58B000-memory.dmp
memory/4428-50-0x000001FC4E020000-0x000001FC4E2FB000-memory.dmp
memory/4428-51-0x00007FFB06640000-0x00007FFB06885000-memory.dmp
memory/4428-48-0x00007FFB0C590000-0x00007FFB0C63B000-memory.dmp
memory/4428-52-0x00007FFB0D810000-0x00007FFB0DAC6000-memory.dmp