Analysis
- max time kernel
299s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
27/07/2026, 19:33
General
- Target Moirai/data/sfx/footstep_stone_1.wav
- Size 152KB
- Sample260727-x9z2bacr21
- SHA256 85e1adea6f252140d4c4a4aff761faea890eac76961511d07d0773c044f1c151
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Moirai\data\sfx\footstep_stone_1.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5100-0-0x00007FFD396AD000-0x00007FFD396AF000-memory.dmp
memory/5100-1-0x00007FFD39400000-0x00007FFD396B6000-memory.dmp
memory/5100-2-0x00007FFD39400000-0x00007FFD396B6000-memory.dmp
memory/5100-5-0x00007FFD39400000-0x00007FFD396B6000-memory.dmp
memory/5100-4-0x00007FFD39400000-0x00007FFD396B6000-memory.dmp
memory/5100-3-0x00007FFD39400000-0x00007FFD396B6000-memory.dmp
memory/5100-7-0x00007FFD39400000-0x00007FFD396B6000-memory.dmp
memory/5100-8-0x00007FFD39400000-0x00007FFD396B6000-memory.dmp
memory/5100-6-0x00007FFD39400000-0x00007FFD396B6000-memory.dmp
memory/5100-9-0x00007FFD39400000-0x00007FFD396B6000-memory.dmp
memory/5100-11-0x00007FFD39400000-0x00007FFD396B6000-memory.dmp
memory/5100-10-0x00007FFD39400000-0x00007FFD396B6000-memory.dmp
memory/5100-12-0x00007FFD39400000-0x00007FFD396B6000-memory.dmp
memory/5100-17-0x00007FFD39400000-0x00007FFD396B6000-memory.dmp
memory/5100-18-0x00007FF726390000-0x00007FF726488000-memory.dmp
memory/5100-19-0x00007FFD45230000-0x00007FFD45264000-memory.dmp
memory/5100-24-0x00007FFD46540000-0x00007FFD4656B000-memory.dmp
memory/5100-22-0x00007FFD4BB70000-0x00007FFD4BB89000-memory.dmp
memory/5100-23-0x00007FFD4B590000-0x00007FFD4B5B2000-memory.dmp
memory/5100-21-0x00007FFD4DD90000-0x00007FFD4DDA1000-memory.dmp
memory/5100-27-0x00007FFD45210000-0x00007FFD45221000-memory.dmp
memory/5100-28-0x00007FFD44290000-0x00007FFD44362000-memory.dmp
memory/5100-26-0x00007FFD4B9A0000-0x00007FFD4B9B4000-memory.dmp
memory/5100-36-0x00007FFD40970000-0x00007FFD4099D000-memory.dmp
memory/5100-30-0x00007FFD3D570000-0x00007FFD3D658000-memory.dmp
memory/5100-39-0x00007FFD402B0000-0x00007FFD402C1000-memory.dmp
memory/5100-38-0x00007FFD40310000-0x00007FFD40321000-memory.dmp
memory/5100-40-0x00007FFD3A7F0000-0x00007FFD3A9FB000-memory.dmp
memory/5100-44-0x00007FFD3B9D0000-0x00007FFD3BA7B000-memory.dmp
memory/5100-47-0x00007FFD32EC0000-0x00007FFD33105000-memory.dmp
memory/5100-46-0x000001999AD60000-0x000001999B0F0000-memory.dmp
memory/5100-35-0x00007FFD41C60000-0x00007FFD41C86000-memory.dmp
memory/5100-45-0x00007FFD3DB20000-0x00007FFD3DB3B000-memory.dmp
memory/5100-43-0x00007FFD3D4A0000-0x00007FFD3D4C5000-memory.dmp
memory/5100-42-0x00007FFD3D000000-0x00007FFD3D04F000-memory.dmp
memory/5100-41-0x00007FFD3D4D0000-0x00007FFD3D568000-memory.dmp
memory/5100-37-0x00007FFD41CE0000-0x00007FFD41CFA000-memory.dmp
memory/5100-33-0x00007FFD44260000-0x00007FFD4428F000-memory.dmp
memory/5100-31-0x00007FFD3D050000-0x00007FFD3D133000-memory.dmp
memory/5100-29-0x00007FFD38B80000-0x00007FFD38E16000-memory.dmp
memory/5100-34-0x00007FFD41D20000-0x00007FFD41D38000-memory.dmp
memory/5100-25-0x00007FFD38E20000-0x00007FFD391B0000-memory.dmp
memory/5100-32-0x00007FFD421A0000-0x00007FFD421E1000-memory.dmp