Analysis
- user interaction
yes - max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
27/07/2026, 15:36
General
- Target $TEMP/bgm.xm
- Size 1.0MB
- Sample260727-s13nmahl21
- SHA256 9ae311e672f224a27350dd37cce871187377531741df048082b9cb680cd12882
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 5 IoCs
- Suspicious use of SendNotifyMessage 4 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\$TEMP\bgm.xm"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3016-0-0x00007FFC81A6D000-0x00007FFC81A6F000-memory.dmp
memory/3016-1-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-2-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-3-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-4-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-6-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-5-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-7-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-9-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-8-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-10-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-12-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-13-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-11-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-14-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-15-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-20-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp
memory/3016-21-0x00007FF68F7F0000-0x00007FF68F8E8000-memory.dmp
memory/3016-27-0x00007FFC8E750000-0x00007FFC8E77B000-memory.dmp
memory/3016-26-0x00007FFC8E780000-0x00007FFC8E7A2000-memory.dmp
memory/3016-25-0x00007FFC917C0000-0x00007FFC917D9000-memory.dmp
memory/3016-24-0x00007FFC91DB0000-0x00007FFC91DC1000-memory.dmp
memory/3016-30-0x00007FFC8E730000-0x00007FFC8E741000-memory.dmp
memory/3016-36-0x00007FFC8E700000-0x00007FFC8E72F000-memory.dmp
memory/3016-42-0x00007FFC8C050000-0x00007FFC8C061000-memory.dmp
memory/3016-48-0x00007FFC8BE00000-0x00007FFC8BE1B000-memory.dmp
memory/3016-47-0x00007FFC81170000-0x00007FFC8121B000-memory.dmp
memory/3016-43-0x00007FFC79C80000-0x00007FFC79E8B000-memory.dmp
memory/3016-46-0x00007FFC8C020000-0x00007FFC8C045000-memory.dmp
memory/3016-45-0x00007FFC84700000-0x00007FFC8474F000-memory.dmp
memory/3016-44-0x00007FFC8BE60000-0x00007FFC8BEF8000-memory.dmp
memory/3016-34-0x00007FFC816D0000-0x00007FFC817B3000-memory.dmp
memory/3016-33-0x00007FFC84750000-0x00007FFC84838000-memory.dmp
memory/3016-41-0x00007FFC8C070000-0x00007FFC8C081000-memory.dmp
memory/3016-40-0x00007FFC8C490000-0x00007FFC8C4AA000-memory.dmp
memory/3016-50-0x00007FFC74200000-0x00007FFC74445000-memory.dmp
memory/3016-39-0x00007FFC8C4B0000-0x00007FFC8C4DD000-memory.dmp
memory/3016-38-0x00007FFC8C4E0000-0x00007FFC8C506000-memory.dmp
memory/3016-37-0x00007FFC8C7A0000-0x00007FFC8C7B8000-memory.dmp
memory/3016-28-0x00007FFC7AA70000-0x00007FFC7AE00000-memory.dmp
memory/3016-49-0x000001EF5FA50000-0x000001EF612BF000-memory.dmp
memory/3016-35-0x00007FFC8D350000-0x00007FFC8D391000-memory.dmp
memory/3016-32-0x00007FFC7A7D0000-0x00007FFC7AA66000-memory.dmp
memory/3016-31-0x00007FFC8BF00000-0x00007FFC8BFD2000-memory.dmp
memory/3016-29-0x00007FFC90180000-0x00007FFC90194000-memory.dmp
memory/3016-22-0x00007FFC93660000-0x00007FFC93694000-memory.dmp
memory/3016-263-0x00007FFC817C0000-0x00007FFC81A76000-memory.dmp