Analysis
- max time kernel
299s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
27/07/2026, 19:33
General
- Target Moirai/data/sfx/footstep_stone_2.wav
- Size 131KB
- Sample260727-x9z2bacr21
- SHA256 bcb4a49803f59fde5bd1c20400b4ee30ad01d213077d57142dadea80ac0e1b07
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Moirai\data\sfx\footstep_stone_2.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4824-0-0x00007FFA8D8AD000-0x00007FFA8D8AF000-memory.dmp
memory/4824-2-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-1-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-3-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-4-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-5-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-6-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-7-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-8-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-9-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-10-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-11-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-12-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-13-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-14-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-16-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-15-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-17-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-18-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-19-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-20-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-22-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-21-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-23-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-24-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-25-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-27-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-26-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-28-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-29-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-30-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-32-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-33-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-31-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-34-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-36-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-38-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-40-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-39-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-41-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-37-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-35-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-46-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-47-0x00007FFA8D600000-0x00007FFA8D8B6000-memory.dmp
memory/4824-53-0x00007FFA8D550000-0x00007FFA8D572000-memory.dmp
memory/4824-54-0x00007FFA8D520000-0x00007FFA8D54B000-memory.dmp
memory/4824-56-0x00007FFA8D500000-0x00007FFA8D514000-memory.dmp
memory/4824-55-0x00007FFA7AF30000-0x00007FFA7B2C0000-memory.dmp
memory/4824-68-0x00007FFA86200000-0x00007FFA86211000-memory.dmp
memory/4824-75-0x00007FFA84520000-0x00007FFA8453B000-memory.dmp
memory/4824-72-0x00007FFA840E0000-0x00007FFA8412F000-memory.dmp
memory/4824-76-0x00000205A2F90000-0x00000205A3320000-memory.dmp
memory/4824-77-0x00007FFA75120000-0x00007FFA75365000-memory.dmp
memory/4824-74-0x00007FFA7FB00000-0x00007FFA7FBAB000-memory.dmp
memory/4824-71-0x00007FFA83BD0000-0x00007FFA83C68000-memory.dmp
memory/4824-70-0x00007FFA7AA80000-0x00007FFA7AC8B000-memory.dmp
memory/4824-73-0x00007FFA83D80000-0x00007FFA83DA5000-memory.dmp
memory/4824-65-0x00007FFA869E0000-0x00007FFA86A06000-memory.dmp
memory/4824-69-0x00007FFA850C0000-0x00007FFA850D1000-memory.dmp
memory/4824-66-0x00007FFA86220000-0x00007FFA8624D000-memory.dmp
memory/4824-67-0x00007FFA88480000-0x00007FFA8849A000-memory.dmp
memory/4824-61-0x00007FFA82900000-0x00007FFA829E3000-memory.dmp
memory/4824-63-0x00007FFA8C780000-0x00007FFA8C7AF000-memory.dmp
memory/4824-64-0x00007FFA8C5C0000-0x00007FFA8C5D8000-memory.dmp
memory/4824-62-0x00007FFA86A60000-0x00007FFA86AA1000-memory.dmp
memory/4824-60-0x00007FFA86250000-0x00007FFA86338000-memory.dmp
memory/4824-59-0x00007FFA7AC90000-0x00007FFA7AF26000-memory.dmp
memory/4824-58-0x00007FFA86340000-0x00007FFA86412000-memory.dmp
memory/4824-57-0x00007FFA8D4E0000-0x00007FFA8D4F1000-memory.dmp
memory/4824-52-0x00007FFA8EFC0000-0x00007FFA8EFD9000-memory.dmp
memory/4824-48-0x00007FF6A9A00000-0x00007FF6A9AF8000-memory.dmp
memory/4824-49-0x00007FFA8FBF0000-0x00007FFA8FC24000-memory.dmp
memory/4824-51-0x00007FFA91E00000-0x00007FFA91E11000-memory.dmp