Analysis
- max time kernel
148s - max time network
160s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
24/07/2026, 02:34
General
- Target Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- VERT Overlay.mov
- Size 767KB
- Sample260724-c2sbaaeb99
- SHA256 278f0561d2f7a7dddf877e87c8f8202770874e5bea4624a979fcf315c3de468d
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 24 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Ryanherrick - ULTIMATE STARTER PACK\ESSENTIAL OL\RH- VERT Overlay.mov"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3800-0-0x00007FFEED6FD000-0x00007FFEED6FF000-memory.dmp
memory/3800-1-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-2-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-4-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-3-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-6-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-5-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-7-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-9-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-10-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-8-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-11-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-12-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-13-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-18-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-19-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-20-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-21-0x00007FFEED450000-0x00007FFEED706000-memory.dmp
memory/3800-22-0x00007FF6911D0000-0x00007FF6912C8000-memory.dmp
memory/3800-23-0x00007FFEFF480000-0x00007FFEFF4B4000-memory.dmp
memory/3800-28-0x00007FFEF83E0000-0x00007FFEF840B000-memory.dmp
memory/3800-27-0x00007FFEFBF90000-0x00007FFEFBFB2000-memory.dmp
memory/3800-26-0x00007FFF002B0000-0x00007FFF002C9000-memory.dmp
memory/3800-31-0x00007FFEF8C40000-0x00007FFEF8C51000-memory.dmp
memory/3800-29-0x00007FFEECE70000-0x00007FFEED200000-memory.dmp
memory/3800-34-0x00007FFEF1BA0000-0x00007FFEF1C88000-memory.dmp
memory/3800-41-0x00007FFEF6790000-0x00007FFEF67AA000-memory.dmp
memory/3800-44-0x00007FFEEC9C0000-0x00007FFEECBCB000-memory.dmp
memory/3800-47-0x00007FFEF51B0000-0x00007FFEF51D5000-memory.dmp
memory/3800-49-0x00007FFEF5FF0000-0x00007FFEF600B000-memory.dmp
memory/3800-51-0x00007FFEE6E70000-0x00007FFEE70B5000-memory.dmp
memory/3800-50-0x0000016203D50000-0x00000162040E0000-memory.dmp
memory/3800-48-0x00007FFEF1580000-0x00007FFEF162B000-memory.dmp
memory/3800-46-0x00007FFEF1630000-0x00007FFEF167F000-memory.dmp
memory/3800-45-0x00007FFEF3D90000-0x00007FFEF3E28000-memory.dmp
memory/3800-35-0x00007FFEF1A10000-0x00007FFEF1AF3000-memory.dmp
memory/3800-43-0x00007FFEF6180000-0x00007FFEF6191000-memory.dmp
memory/3800-42-0x00007FFEF66F0000-0x00007FFEF6701000-memory.dmp
memory/3800-40-0x00007FFEF6010000-0x00007FFEF603D000-memory.dmp
memory/3800-39-0x00007FFEF8310000-0x00007FFEF8336000-memory.dmp
memory/3800-38-0x00007FFEF8340000-0x00007FFEF8358000-memory.dmp
memory/3800-37-0x00007FFEF8360000-0x00007FFEF838F000-memory.dmp
memory/3800-36-0x00007FFEF8390000-0x00007FFEF83D1000-memory.dmp
memory/3800-33-0x00007FFEECBD0000-0x00007FFEECE66000-memory.dmp
memory/3800-32-0x00007FFEF5C80000-0x00007FFEF5D52000-memory.dmp
memory/3800-30-0x00007FFEFEE20000-0x00007FFEFEE34000-memory.dmp
memory/3800-25-0x00007FFF01D60000-0x00007FFF01D71000-memory.dmp