Analysis
- max time kernel
148s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
27/07/2026, 15:36
General
- Target $TEMP/bgm.xm
- Size 1.0MB
- Sample260727-s13nmahl21
- SHA256 9ae311e672f224a27350dd37cce871187377531741df048082b9cb680cd12882
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 5 IoCs
- Suspicious use of SendNotifyMessage 4 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\$TEMP\bgm.xm"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/408-4-0x00007FF6CF0C0000-0x00007FF6CF1B8000-memory.dmp
memory/408-5-0x00007FFE144E0000-0x00007FFE14514000-memory.dmp
memory/408-6-0x00007FFE07830000-0x00007FFE07AE6000-memory.dmp
memory/408-10-0x00007FFE14220000-0x00007FFE1424B000-memory.dmp
memory/408-9-0x00007FFE14250000-0x00007FFE14272000-memory.dmp
memory/408-15-0x00007FFE069B0000-0x00007FFE06C46000-memory.dmp
memory/408-8-0x00007FFE1A550000-0x00007FFE1A569000-memory.dmp
memory/408-16-0x00007FFE13560000-0x00007FFE13648000-memory.dmp
memory/408-25-0x00007FFE136E0000-0x00007FFE136F1000-memory.dmp
memory/408-30-0x00007FFE06650000-0x00007FFE066FB000-memory.dmp
memory/408-34-0x0000024C7E7E0000-0x0000024C7E80B000-memory.dmp
memory/408-35-0x00007FFE00940000-0x00007FFE00B85000-memory.dmp
memory/408-33-0x0000024C7E9C0000-0x0000024C7ECC0000-memory.dmp
memory/408-32-0x00007FFE13360000-0x00007FFE13372000-memory.dmp
memory/408-31-0x00007FFE13670000-0x00007FFE1368B000-memory.dmp
memory/408-29-0x00007FFE0D740000-0x00007FFE0D765000-memory.dmp
memory/408-28-0x00007FFE13690000-0x00007FFE136DF000-memory.dmp
memory/408-27-0x00007FFE06700000-0x00007FFE06798000-memory.dmp
memory/408-26-0x00007FFE067A0000-0x00007FFE069AB000-memory.dmp
memory/408-24-0x00007FFE13700000-0x00007FFE13711000-memory.dmp
memory/408-23-0x00007FFE13BF0000-0x00007FFE13C0A000-memory.dmp
memory/408-22-0x00007FFE13720000-0x00007FFE1374D000-memory.dmp
memory/408-21-0x00007FFE13CD0000-0x00007FFE13CF6000-memory.dmp
memory/408-20-0x00007FFE144C0000-0x00007FFE144D8000-memory.dmp
memory/408-19-0x00007FFE14110000-0x00007FFE1413F000-memory.dmp
memory/408-18-0x00007FFE138A0000-0x00007FFE138E1000-memory.dmp
memory/408-17-0x00007FFE07550000-0x00007FFE07633000-memory.dmp
memory/408-14-0x00007FFE14140000-0x00007FFE14212000-memory.dmp
memory/408-13-0x00007FFE146B0000-0x00007FFE146C1000-memory.dmp
memory/408-12-0x00007FFE194A0000-0x00007FFE194B4000-memory.dmp
memory/408-11-0x00007FFE06FD0000-0x00007FFE07360000-memory.dmp
memory/408-7-0x00007FFE1DD40000-0x00007FFE1DD51000-memory.dmp