Analysis
- max time kernel
299s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
27/07/2026, 19:33
General
- Target Moirai/data/sfx/footstep_stone_3.wav
- Size 104KB
- Sample260727-x9z2bacr21
- SHA256 123fe28d08ad42e697c7048448d8279d54a589808feadceeba3bc7ddf32509af
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Moirai\data\sfx\footstep_stone_3.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4280-0-0x00007FF91A40D000-0x00007FF91A40F000-memory.dmp
memory/4280-1-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-2-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-3-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-4-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-5-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-6-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-8-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-9-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-7-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-10-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-11-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-12-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-13-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-14-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-15-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-17-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-16-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-18-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-19-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-20-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-21-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-22-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-23-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-24-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-25-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-26-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-27-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-28-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-29-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-30-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-35-0x00007FF91A160000-0x00007FF91A416000-memory.dmp
memory/4280-36-0x00007FF74FD60000-0x00007FF74FE58000-memory.dmp
memory/4280-42-0x00007FF9282F0000-0x00007FF92831B000-memory.dmp
memory/4280-41-0x00007FF928B70000-0x00007FF928B92000-memory.dmp
memory/4280-40-0x00007FF9298F0000-0x00007FF929909000-memory.dmp
memory/4280-45-0x00007FF9210F0000-0x00007FF921101000-memory.dmp
memory/4280-46-0x00007FF91CD40000-0x00007FF91CE12000-memory.dmp
memory/4280-47-0x00007FF915300000-0x00007FF915596000-memory.dmp
memory/4280-43-0x00007FF915800000-0x00007FF915B90000-memory.dmp
memory/4280-48-0x00007FF91CC50000-0x00007FF91CD38000-memory.dmp
memory/4280-44-0x00007FF922A90000-0x00007FF922AA4000-memory.dmp
memory/4280-49-0x00007FF91A590000-0x00007FF91A673000-memory.dmp
memory/4280-62-0x00007FF915750000-0x00007FF9157FB000-memory.dmp
memory/4280-59-0x00007FF917930000-0x00007FF9179C8000-memory.dmp
memory/4280-65-0x00007FF90ED50000-0x00007FF90EF95000-memory.dmp
memory/4280-64-0x0000016410C70000-0x0000016410F4B000-memory.dmp
memory/4280-63-0x00007FF91A140000-0x00007FF91A15B000-memory.dmp
memory/4280-61-0x00007FF9178B0000-0x00007FF9178D5000-memory.dmp
memory/4280-60-0x00007FF9178E0000-0x00007FF91792F000-memory.dmp
memory/4280-58-0x00007FF9150F0000-0x00007FF9152FB000-memory.dmp
memory/4280-57-0x00007FF91A550000-0x00007FF91A561000-memory.dmp
memory/4280-56-0x00007FF91A570000-0x00007FF91A581000-memory.dmp
memory/4280-55-0x00007FF91E7C0000-0x00007FF91E7DA000-memory.dmp
memory/4280-53-0x00007FF9208C0000-0x00007FF9208E6000-memory.dmp
memory/4280-54-0x00007FF920890000-0x00007FF9208BD000-memory.dmp
memory/4280-52-0x00007FF9208F0000-0x00007FF920908000-memory.dmp
memory/4280-50-0x00007FF920910000-0x00007FF920951000-memory.dmp
memory/4280-51-0x00007FF9210C0000-0x00007FF9210EF000-memory.dmp
memory/4280-39-0x00007FF92C920000-0x00007FF92C931000-memory.dmp
memory/4280-37-0x00007FF9275F0000-0x00007FF927624000-memory.dmp