Analysis
- max time kernel
299s - max time network
224s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
27/07/2026, 19:33
General
- Target Moirai/data/sfx/footstep_stone_4.wav
- Size 138KB
- Sample260727-x9z2bacr21
- SHA256 b9ba2d22a4f9207997f8e250155c3e06ab731cc8b24c51b253f68895c78b72c0
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Moirai\data\sfx\footstep_stone_4.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3244-0-0x00007FF9CF8AD000-0x00007FF9CF8AF000-memory.dmp
memory/3244-1-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-2-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-3-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-4-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-5-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-6-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-7-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-9-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-8-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-10-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-11-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-12-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-13-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-14-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-16-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-17-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-18-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-19-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-15-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-20-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-21-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-22-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-24-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-23-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-25-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-27-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-26-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-29-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-28-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-31-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-32-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-30-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-33-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-35-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-34-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-36-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-41-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-42-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-43-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-49-0x00007FF9E0C70000-0x00007FF9E0C92000-memory.dmp
memory/3244-50-0x00007FF9DA550000-0x00007FF9DA57B000-memory.dmp
memory/3244-48-0x00007FF9E1110000-0x00007FF9E1129000-memory.dmp
memory/3244-47-0x00007FF9E15F0000-0x00007FF9E1601000-memory.dmp
memory/3244-53-0x00007FF9DA940000-0x00007FF9DA951000-memory.dmp
memory/3244-52-0x00007FF9DFCC0000-0x00007FF9DFCD4000-memory.dmp
memory/3244-54-0x00007FF9DA290000-0x00007FF9DA362000-memory.dmp
memory/3244-63-0x00007FF9D7350000-0x00007FF9D736A000-memory.dmp
memory/3244-62-0x00007FF9D81E0000-0x00007FF9D820D000-memory.dmp
memory/3244-70-0x00007FF9D2080000-0x00007FF9D212B000-memory.dmp
memory/3244-67-0x00007FF9D5F90000-0x00007FF9D6028000-memory.dmp
memory/3244-73-0x00007FF9C8D10000-0x00007FF9C8F55000-memory.dmp
memory/3244-72-0x00000264F40A0000-0x00000264F437B000-memory.dmp
memory/3244-66-0x00007FF9CEB70000-0x00007FF9CED7B000-memory.dmp
memory/3244-71-0x00007FF9D5F70000-0x00007FF9D5F8B000-memory.dmp
memory/3244-69-0x00007FF9D72E0000-0x00007FF9D7305000-memory.dmp
memory/3244-68-0x00007FF9D3F90000-0x00007FF9D3FDF000-memory.dmp
memory/3244-61-0x00007FF9D8210000-0x00007FF9D8236000-memory.dmp
memory/3244-59-0x00007FF9DA520000-0x00007FF9DA54F000-memory.dmp
memory/3244-58-0x00007FF9D8290000-0x00007FF9D82D1000-memory.dmp
memory/3244-57-0x00007FF9D3FE0000-0x00007FF9D40C3000-memory.dmp
memory/3244-56-0x00007FF9D6030000-0x00007FF9D6118000-memory.dmp
memory/3244-55-0x00007FF9CED80000-0x00007FF9CF016000-memory.dmp
memory/3244-65-0x00007FF9D7310000-0x00007FF9D7321000-memory.dmp
memory/3244-64-0x00007FF9D7330000-0x00007FF9D7341000-memory.dmp
memory/3244-60-0x00007FF9DA270000-0x00007FF9DA288000-memory.dmp
memory/3244-51-0x00007FF9CF020000-0x00007FF9CF3B0000-memory.dmp
memory/3244-45-0x00007FF9DA960000-0x00007FF9DA994000-memory.dmp
memory/3244-44-0x00007FF791620000-0x00007FF791718000-memory.dmp