Analysis
- max time kernel
148s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
30/07/2026, 22:58
General
- Target ePGxcAvZ9m.mov
- Size 478KB
- Sample260730-2x2ftsgn4v
- SHA256 375fc94e1c729f99732b2f13e8786e84e80df2a7107da3389c26f9c1b366f4c8
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 25 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\ePGxcAvZ9m.mov"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2576-0-0x00007FFF2570D000-0x00007FFF2570F000-memory.dmp
memory/2576-1-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-2-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-3-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-5-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-4-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-7-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-8-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-9-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-6-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-10-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-11-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-13-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-15-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-14-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-12-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-16-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-17-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-18-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-23-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-24-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-26-0x00007FFF2ECE0000-0x00007FFF2ED14000-memory.dmp
memory/2576-25-0x00007FF7E1F40000-0x00007FF7E2038000-memory.dmp
memory/2576-30-0x00007FFF34AD0000-0x00007FFF34AF2000-memory.dmp
memory/2576-31-0x00007FFF2FE50000-0x00007FFF2FE7B000-memory.dmp
memory/2576-29-0x00007FFF34C70000-0x00007FFF34C89000-memory.dmp
memory/2576-27-0x00007FFF25460000-0x00007FFF25716000-memory.dmp
memory/2576-36-0x00007FFF1EA40000-0x00007FFF1ECD6000-memory.dmp
memory/2576-44-0x00007FFF29400000-0x00007FFF2941A000-memory.dmp
memory/2576-37-0x00007FFF25370000-0x00007FFF25458000-memory.dmp
memory/2576-42-0x00007FFF28F40000-0x00007FFF28F66000-memory.dmp
memory/2576-51-0x00007FFF22600000-0x00007FFF226AB000-memory.dmp
memory/2576-54-0x00007FFF171E0000-0x00007FFF17425000-memory.dmp
memory/2576-53-0x000001C823640000-0x000001C823881000-memory.dmp
memory/2576-47-0x00007FFF1DB10000-0x00007FFF1DD1B000-memory.dmp
memory/2576-52-0x00007FFF225E0000-0x00007FFF225FB000-memory.dmp
memory/2576-50-0x00007FFF257C0000-0x00007FFF257E5000-memory.dmp
memory/2576-49-0x00007FFF257F0000-0x00007FFF2583F000-memory.dmp
memory/2576-39-0x00007FFF28FA0000-0x00007FFF28FE1000-memory.dmp
memory/2576-48-0x00007FFF226B0000-0x00007FFF22748000-memory.dmp
memory/2576-38-0x00007FFF24D20000-0x00007FFF24E03000-memory.dmp
memory/2576-46-0x00007FFF25840000-0x00007FFF25851000-memory.dmp
memory/2576-40-0x00007FFF28F70000-0x00007FFF28F9F000-memory.dmp
memory/2576-45-0x00007FFF26BB0000-0x00007FFF26BC1000-memory.dmp
memory/2576-43-0x00007FFF28D00000-0x00007FFF28D2D000-memory.dmp
memory/2576-41-0x00007FFF2AF20000-0x00007FFF2AF38000-memory.dmp
memory/2576-35-0x00007FFF28D30000-0x00007FFF28E02000-memory.dmp
memory/2576-32-0x00007FFF1F420000-0x00007FFF1F7B0000-memory.dmp
memory/2576-34-0x00007FFF2FB30000-0x00007FFF2FB41000-memory.dmp
memory/2576-33-0x00007FFF30AE0000-0x00007FFF30AF4000-memory.dmp
memory/2576-28-0x00007FFF38240000-0x00007FFF38251000-memory.dmp