Analysis
- max time kernel
149s - max time network
160s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
24/07/2026, 02:34
General
- Target Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH-CRT BG (BLUE) .mov
- Size 16.2MB
- Sample260724-c2sbaaeb99
- SHA256 da8ea8871f53811e882601fbd89e92b7934a38671d7053e76814be845fef6b9e
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 24 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Ryanherrick - ULTIMATE STARTER PACK\ESSENTIAL OL\RH-CRT BG (BLUE) .mov"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/956-0-0x000001F57919D000-0x000001F57919F000-memory.dmp
memory/956-1-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-2-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-3-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-5-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-4-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-6-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-7-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-8-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-9-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-11-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-10-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-12-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-13-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-28-0x00007FFBD71A0000-0x00007FFBD7272000-memory.dmp
memory/956-18-0x00007FF7CFF60000-0x00007FF7D0058000-memory.dmp
memory/956-26-0x00007FFBE2890000-0x00007FFBE28A4000-memory.dmp
memory/956-21-0x00007FFBE8290000-0x00007FFBE82A1000-memory.dmp
memory/956-22-0x00007FFBE4270000-0x00007FFBE4289000-memory.dmp
memory/956-24-0x00007FFBE28B0000-0x00007FFBE28DB000-memory.dmp
memory/956-23-0x00007FFBE28E0000-0x00007FFBE2902000-memory.dmp
memory/956-19-0x00007FFBE2950000-0x00007FFBE2984000-memory.dmp
memory/956-43-0x00007FFBD9000000-0x00007FFBD9025000-memory.dmp
memory/956-45-0x00007FFBD7130000-0x00007FFBD714B000-memory.dmp
memory/956-41-0x00007FFBD8D50000-0x00007FFBD8DE8000-memory.dmp
memory/956-40-0x00007FFBCFDA0000-0x00007FFBCFFAB000-memory.dmp
memory/956-48-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-47-0x00007FFBC9F20000-0x00007FFBCA165000-memory.dmp
memory/956-46-0x000001F5796F0000-0x000001F579A80000-memory.dmp
memory/956-44-0x00007FFBD3B10000-0x00007FFBD3BBB000-memory.dmp
memory/956-39-0x00007FFBD9030000-0x00007FFBD9041000-memory.dmp
memory/956-38-0x00007FFBDABC0000-0x00007FFBDABD1000-memory.dmp
memory/956-37-0x00007FFBDB120000-0x00007FFBDB13A000-memory.dmp
memory/956-36-0x00007FFBDABE0000-0x00007FFBDAC0D000-memory.dmp
memory/956-35-0x00007FFBDBD20000-0x00007FFBDBD46000-memory.dmp
memory/956-30-0x00007FFBD4120000-0x00007FFBD4208000-memory.dmp
memory/956-31-0x00007FFBD4030000-0x00007FFBD4113000-memory.dmp
memory/956-42-0x00007FFBD7150000-0x00007FFBD719F000-memory.dmp
memory/956-34-0x00007FFBE23C0000-0x00007FFBE23D8000-memory.dmp
memory/956-32-0x00007FFBDBD80000-0x00007FFBDBDC1000-memory.dmp
memory/956-33-0x00007FFBDBD50000-0x00007FFBDBD7F000-memory.dmp
memory/956-29-0x00007FFBCFFB0000-0x00007FFBD0246000-memory.dmp
memory/956-25-0x00007FFBD0250000-0x00007FFBD05E0000-memory.dmp
memory/956-27-0x00007FFBE2870000-0x00007FFBE2881000-memory.dmp
memory/956-20-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-49-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-50-0x000001F578EF0000-0x000001F5791A6000-memory.dmp
memory/956-51-0x000001F578EF0000-0x000001F5791A6000-memory.dmp