Analysis
- max time kernel
299s - max time network
304s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
27/07/2026, 19:33
General
- Target Moirai/data/sfx/sheep1.wav
- Size 167KB
- Sample260727-x9z2bacr21
- SHA256 7d6cb122fdb5f47b8c55c8950ea57558239975ae2898172b6981a074f4332a82
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Moirai\data\sfx\sheep1.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5536-0-0x00007FFBE17DD000-0x00007FFBE17DF000-memory.dmp
memory/5536-1-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-3-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-2-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-4-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-5-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-6-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-7-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-8-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-9-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-10-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-11-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-12-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-13-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-16-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-17-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-15-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-18-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-20-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-19-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-14-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-21-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-22-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-23-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-24-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-25-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-27-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-29-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-28-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-30-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-26-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-31-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-32-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-33-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-34-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-36-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-37-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-38-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-35-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-39-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-44-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/5536-51-0x00007FFBE94B0000-0x00007FFBE94DB000-memory.dmp
memory/5536-53-0x00007FFBEC9F0000-0x00007FFBECA04000-memory.dmp
memory/5536-52-0x00007FFBE0B10000-0x00007FFBE0EA0000-memory.dmp
memory/5536-57-0x00007FFBE3C00000-0x00007FFBE3CE8000-memory.dmp
memory/5536-58-0x00007FFBE2210000-0x00007FFBE22F3000-memory.dmp
memory/5536-66-0x00007FFBE7090000-0x00007FFBE70A1000-memory.dmp
memory/5536-72-0x00007FFBE3B60000-0x00007FFBE3B7B000-memory.dmp
memory/5536-76-0x000001328B040000-0x000001328B054000-memory.dmp
memory/5536-75-0x000001328B020000-0x000001328B033000-memory.dmp
memory/5536-74-0x000001328B000000-0x000001328B016000-memory.dmp
memory/5536-77-0x00007FFBDA5A0000-0x00007FFBDA7E5000-memory.dmp
memory/5536-73-0x000001328A980000-0x000001328A999000-memory.dmp
memory/5536-71-0x00007FFBE1230000-0x00007FFBE12DB000-memory.dmp
memory/5536-70-0x00007FFBE3B80000-0x00007FFBE3BA5000-memory.dmp
memory/5536-69-0x00007FFBE3BB0000-0x00007FFBE3BFF000-memory.dmp
memory/5536-68-0x00007FFBE6FF0000-0x00007FFBE7088000-memory.dmp
memory/5536-65-0x00007FFBE70B0000-0x00007FFBE70C1000-memory.dmp
memory/5536-67-0x00007FFBE0660000-0x00007FFBE086B000-memory.dmp
memory/5536-62-0x00007FFBE7590000-0x00007FFBE75B6000-memory.dmp
memory/5536-64-0x00007FFBE8960000-0x00007FFBE897A000-memory.dmp
memory/5536-63-0x00007FFBE7560000-0x00007FFBE758D000-memory.dmp
memory/5536-61-0x00007FFBE9440000-0x00007FFBE9458000-memory.dmp
memory/5536-60-0x00007FFBE8980000-0x00007FFBE89AF000-memory.dmp
memory/5536-59-0x00007FFBE9460000-0x00007FFBE94A1000-memory.dmp
memory/5536-56-0x00007FFBE0870000-0x00007FFBE0B06000-memory.dmp
memory/5536-55-0x00007FFBE75C0000-0x00007FFBE7692000-memory.dmp
memory/5536-54-0x00007FFBE9650000-0x00007FFBE9661000-memory.dmp
memory/5536-49-0x00007FFBF9170000-0x00007FFBF9189000-memory.dmp
memory/5536-50-0x00007FFBF2A80000-0x00007FFBF2AA2000-memory.dmp
memory/5536-48-0x00007FFBF9370000-0x00007FFBF9381000-memory.dmp
memory/5536-45-0x00007FF79EA50000-0x00007FF79EB48000-memory.dmp
memory/5536-46-0x00007FFBECA10000-0x00007FFBECA44000-memory.dmp