Analysis
- max time kernel
299s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
27/07/2026, 19:33
General
- Target Moirai/data/sfx/rock_scrape1.wav
- Size 955KB
- Sample260727-x9z2bacr21
- SHA256 61027a2f3e37f23fc430f7f7e3e20d9d064381e89a32ebade397733e58d0f11a
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Moirai\data\sfx\rock_scrape1.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3348-0-0x00007FFD5F34D000-0x00007FFD5F34F000-memory.dmp
memory/3348-1-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-2-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-3-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-4-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-5-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-6-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-7-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-8-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-9-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-10-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-11-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-12-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-13-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-14-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-15-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-16-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-18-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-17-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-19-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-20-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-22-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-21-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-23-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-24-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-26-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-27-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-28-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-29-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-30-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-25-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-32-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-33-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-34-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-31-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-35-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-37-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-36-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-38-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-39-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-44-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-45-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-46-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-47-0x00007FFD5F0A0000-0x00007FFD5F356000-memory.dmp
memory/3348-54-0x00007FFD6AC70000-0x00007FFD6AC9B000-memory.dmp
memory/3348-57-0x00007FFD6AC30000-0x00007FFD6AC41000-memory.dmp
memory/3348-56-0x00007FFD6AC50000-0x00007FFD6AC64000-memory.dmp
memory/3348-69-0x00007FFD68040000-0x00007FFD68051000-memory.dmp
memory/3348-73-0x00007FFD63130000-0x00007FFD63155000-memory.dmp
memory/3348-76-0x0000028F0A470000-0x0000028F0A800000-memory.dmp
memory/3348-77-0x00007FFD58A20000-0x00007FFD58C65000-memory.dmp
memory/3348-71-0x00007FFD62150000-0x00007FFD621E8000-memory.dmp
memory/3348-74-0x00007FFD609F0000-0x00007FFD60A9B000-memory.dmp
memory/3348-70-0x00007FFD60680000-0x00007FFD6088B000-memory.dmp
memory/3348-75-0x00007FFD67E20000-0x00007FFD67E3B000-memory.dmp
memory/3348-72-0x00007FFD61D00000-0x00007FFD61D4F000-memory.dmp
memory/3348-61-0x00007FFD61010000-0x00007FFD610F3000-memory.dmp
memory/3348-67-0x00007FFD69FA0000-0x00007FFD69FBA000-memory.dmp
memory/3348-66-0x00007FFD67910000-0x00007FFD6793D000-memory.dmp
memory/3348-65-0x00007FFD679A0000-0x00007FFD679C6000-memory.dmp
memory/3348-60-0x00007FFD61D50000-0x00007FFD61E38000-memory.dmp
memory/3348-68-0x00007FFD682C0000-0x00007FFD682D1000-memory.dmp
memory/3348-64-0x00007FFD6AC10000-0x00007FFD6AC28000-memory.dmp
memory/3348-63-0x00007FFD67D60000-0x00007FFD67D8F000-memory.dmp
memory/3348-62-0x00007FFD67E40000-0x00007FFD67E81000-memory.dmp
memory/3348-55-0x00007FFD5EAC0000-0x00007FFD5EE50000-memory.dmp
memory/3348-59-0x00007FFD5E820000-0x00007FFD5EAB6000-memory.dmp
memory/3348-58-0x00007FFD621F0000-0x00007FFD622C2000-memory.dmp
memory/3348-53-0x00007FFD6BDD0000-0x00007FFD6BDF2000-memory.dmp
memory/3348-52-0x00007FFD75DA0000-0x00007FFD75DB9000-memory.dmp
memory/3348-49-0x00007FFD75CE0000-0x00007FFD75D14000-memory.dmp
memory/3348-51-0x00007FFD77690000-0x00007FFD776A1000-memory.dmp
memory/3348-48-0x00007FF7B3D00000-0x00007FF7B3DF8000-memory.dmp