Analysis
- user interaction
yes - max time kernel
123s - max time network
124s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
30/07/2026, 23:01
Static task
static1
Behavioral task
behavioral1
Sample
ts.mp4
Resource
win10ltsc2021-20260513-en
5 signatures
300 seconds
General
- Target ts.mp4
- Size 512KB
- Sample260730-2zwclassb1
- SHA256 6ec84340e09e53dfd7d26da721cbb63b6e472c357c1daee4ca9718b601b49ee4
- MD5 b94c42c59dc6337e360bf6d5bcf129a0
- SHA1 68bbf559729b74aa9b2f852bd90dc159e0cb9127
- SHA512 cf19fcf0eafa3948d7188df88ffceb8f843c43c0aa3b3024b28fe7a7e57bfd0fe4a9649280158d6401df51ba47ed9c941a1dd348cc86cf35733996c61a2f4d2b
- SSDEEP 12288:9a/MQIqBpXOgOUFksy9RU4GMF2ckX2EX+aZH:Y0SBpXWUnqRUc0Fr
- TLSH T1F9B4238001F26B50EEF403754BBF875A7ACEF2B191B4EBD785302113F6BA959B974061
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4520 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4520 vlc.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe - Suspicious use of SendNotifyMessage 64 IoCs
pid Process 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe 4520 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4520 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\ts.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4520
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
- Size 78B
- SHA256 b086e445514f038c3057d3389f8867e00d414edb7c79d90fa6e3680f3f6765d3
- MD5 68070f05035d4cec7c0d05af42075838
- SHA1 006f47a3fce35b770253f03acdc5f8cf25833a6e
- SHA512 3b8dcd824d41fb6d6fcb145e75314d9c759a325b4b9f2dd0ef12e70f8f06360fb96e78e405fda48177827c5678550f078c307226d4dafebd444d4e3197c36129
- TLSH T10AA0120080855302C6840453116C020F0061D40544403350939DA8440920C5E7280138
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini.lock
- Size 18B
- SHA256 acc24f209962bb192db69872ab44b00573cd21de56fef8da345021727cd8fc16
- MD5 9cb8e70a6bb405a587cc3d322322cf9d
- SHA1 7892ad8c73c1e8819609314c4e955d9d6661c356
- SHA512 ff37ed21267683510eee3b1af48aeb1fbce92429e081b1227d68f8cfb9b29a15a4f38b8267794e3b3ecb5b4f9a46c379b1c2936401be7c986d612d1908468be7
- MD5 SHA1 SHA512