Analysis
- max time kernel
299s - max time network
162s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
27/07/2026, 19:33
General
- Target Moirai/data/sfx/door_locked.wav
- Size 340KB
- Sample260727-x9z2bacr21
- SHA256 c622192d99d9e0ef65a2caf3430e5110d0c4299caaae7e90f8bcfe5ea3bb7850
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Moirai\data\sfx\door_locked.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4188-0-0x00007FFBB0E3D000-0x00007FFBB0E3F000-memory.dmp
memory/4188-1-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-2-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-3-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-4-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-5-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-6-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-7-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-9-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-10-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-8-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-11-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-12-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-13-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-14-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-15-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-16-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-18-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-19-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-20-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-17-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-22-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-23-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-24-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-21-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-25-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-26-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-27-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-29-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-30-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-31-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-32-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-28-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-33-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-35-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-36-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-37-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-39-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-38-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-34-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-44-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-45-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-46-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/4188-47-0x00007FF7D6750000-0x00007FF7D6848000-memory.dmp
memory/4188-53-0x00007FFBB9DB0000-0x00007FFBB9DDB000-memory.dmp
memory/4188-52-0x00007FFBB9DE0000-0x00007FFBB9E02000-memory.dmp
memory/4188-62-0x00007FFBB9D80000-0x00007FFBB9DAF000-memory.dmp
memory/4188-60-0x00007FFBB0470000-0x00007FFBB0553000-memory.dmp
memory/4188-76-0x0000020386B70000-0x0000020386B87000-memory.dmp
memory/4188-73-0x00007FFBB13E0000-0x00007FFBB148B000-memory.dmp
memory/4188-75-0x0000020386600000-0x0000020386611000-memory.dmp
memory/4188-74-0x00007FFBB5EB0000-0x00007FFBB5ECB000-memory.dmp
memory/4188-69-0x00007FFBB0260000-0x00007FFBB046B000-memory.dmp
memory/4188-72-0x00007FFBB7460000-0x00007FFBB7485000-memory.dmp
memory/4188-71-0x00007FFBB7520000-0x00007FFBB756F000-memory.dmp
memory/4188-78-0x00007FFBA8210000-0x00007FFBA8455000-memory.dmp
memory/4188-77-0x0000020386CB0000-0x000002038851F000-memory.dmp
memory/4188-70-0x00007FFBB2920000-0x00007FFBB29B8000-memory.dmp
memory/4188-59-0x00007FFBB1490000-0x00007FFBB1578000-memory.dmp
memory/4188-68-0x00007FFBB7B30000-0x00007FFBB7B41000-memory.dmp
memory/4188-66-0x00007FFBBB8E0000-0x00007FFBBB8FA000-memory.dmp
memory/4188-64-0x00007FFBB96F0000-0x00007FFBB9716000-memory.dmp
memory/4188-63-0x00007FFBBD0F0000-0x00007FFBBD108000-memory.dmp
memory/4188-61-0x00007FFBB9720000-0x00007FFBB9761000-memory.dmp
memory/4188-58-0x00007FFBB0560000-0x00007FFBB07F6000-memory.dmp
memory/4188-67-0x00007FFBB96D0000-0x00007FFBB96E1000-memory.dmp
memory/4188-65-0x00007FFBB7570000-0x00007FFBB759D000-memory.dmp
memory/4188-57-0x00007FFBB29C0000-0x00007FFBB2A92000-memory.dmp
memory/4188-54-0x00007FFBB0800000-0x00007FFBB0B90000-memory.dmp
memory/4188-56-0x00007FFBBDAA0000-0x00007FFBBDAB1000-memory.dmp
memory/4188-55-0x00007FFBBF2B0000-0x00007FFBBF2C4000-memory.dmp
memory/4188-51-0x00007FFBC02B0000-0x00007FFBC02C9000-memory.dmp
memory/4188-50-0x00007FFBC3940000-0x00007FFBC3951000-memory.dmp
memory/4188-48-0x00007FFBC0990000-0x00007FFBC09C4000-memory.dmp