Analysis
- geolocation tags
- max time kernel
898s - max time network
502s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
30/07/2026, 01:26
General
- Target 0702.mp4
- Size 209.8MB
- Sample260730-bttcyaaa57
- SHA256 f7eafe12cef79768b59ae2976e71609ad5a34dbc98f5dfc093882771cef2b9f3
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 27 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\0702.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2988-0-0x00007FFF0EB4D000-0x00007FFF0EB4F000-memory.dmp
memory/2988-1-0x00007FFF0E8A0000-0x00007FFF0EB56000-memory.dmp
memory/2988-2-0x00007FFF0E8A0000-0x00007FFF0EB56000-memory.dmp
memory/2988-3-0x00007FFF0E8A0000-0x00007FFF0EB56000-memory.dmp
memory/2988-4-0x00007FFF0E8A0000-0x00007FFF0EB56000-memory.dmp
memory/2988-5-0x00007FFF0E8A0000-0x00007FFF0EB56000-memory.dmp
memory/2988-10-0x00007FFF0E8A0000-0x00007FFF0EB56000-memory.dmp
memory/2988-11-0x00007FFF0E8A0000-0x00007FFF0EB56000-memory.dmp
memory/2988-12-0x00007FFF0E8A0000-0x00007FFF0EB56000-memory.dmp
memory/2988-13-0x00007FFF0E8A0000-0x00007FFF0EB56000-memory.dmp
memory/2988-25-0x00007FFF0A3A0000-0x00007FFF0A3E1000-memory.dmp
memory/2988-23-0x00007FFF0E7C0000-0x00007FFF0E7D1000-memory.dmp
memory/2988-22-0x00007FFF0E7E0000-0x00007FFF0E7FD000-memory.dmp
memory/2988-20-0x00007FFF0E820000-0x00007FFF0E837000-memory.dmp
memory/2988-19-0x00007FFF0E840000-0x00007FFF0E851000-memory.dmp
memory/2988-17-0x00007FFF0F840000-0x00007FFF0F858000-memory.dmp
memory/2988-14-0x00007FF7268A0000-0x00007FF726998000-memory.dmp
memory/2988-21-0x00007FFF0E800000-0x00007FFF0E811000-memory.dmp
memory/2988-18-0x00007FFF0F6A0000-0x00007FFF0F6B7000-memory.dmp
memory/2988-15-0x00007FFF0F860000-0x00007FFF0F894000-memory.dmp
memory/2988-24-0x00007FFEF9C40000-0x00007FFEF9E4B000-memory.dmp
memory/2988-27-0x00007FFF09FF0000-0x00007FFF0A011000-memory.dmp
memory/2988-33-0x00007FFF02020000-0x00007FFF02031000-memory.dmp
memory/2988-26-0x00007FFEF6300000-0x00007FFEF73B0000-memory.dmp
memory/2988-32-0x00007FFF02040000-0x00007FFF0205B000-memory.dmp
memory/2988-31-0x00007FFF02EC0000-0x00007FFF02ED1000-memory.dmp
memory/2988-30-0x00007FFF08FA0000-0x00007FFF08FB1000-memory.dmp
memory/2988-29-0x00007FFF09F60000-0x00007FFF09F71000-memory.dmp
memory/2988-28-0x00007FFF0A310000-0x00007FFF0A328000-memory.dmp
memory/2988-34-0x00007FFF02000000-0x00007FFF02018000-memory.dmp
memory/2988-35-0x00007FFEFFF00000-0x00007FFEFFF30000-memory.dmp
memory/2988-36-0x00007FFEFE510000-0x00007FFEFE577000-memory.dmp
memory/2988-39-0x00007FFEFDBD0000-0x00007FFEFDC27000-memory.dmp
memory/2988-37-0x00007FFEFDC30000-0x00007FFEFDCAC000-memory.dmp
memory/2988-38-0x00007FFEFFEE0000-0x00007FFEFFEF1000-memory.dmp
memory/2988-40-0x000001E9E17C0000-0x000001E9E302F000-memory.dmp
memory/2988-41-0x00007FFF0E8A0000-0x00007FFF0EB56000-memory.dmp
memory/2988-44-0x00007FFF0E8A0000-0x00007FFF0EB56000-memory.dmp
memory/2988-54-0x00007FFEF6300000-0x00007FFEF73B0000-memory.dmp
memory/2988-68-0x000001E9E17C0000-0x000001E9E302F000-memory.dmp
memory/2988-95-0x000001E9E17C0000-0x000001E9E302F000-memory.dmp
memory/2988-108-0x00007FFEF6300000-0x00007FFEF73B0000-memory.dmp
memory/2988-122-0x000001E9E17C0000-0x000001E9E302F000-memory.dmp
memory/2988-125-0x00007FFF0E8A0000-0x00007FFF0EB56000-memory.dmp
memory/2988-135-0x00007FFEF6300000-0x00007FFEF73B0000-memory.dmp
memory/2988-149-0x000001E9E17C0000-0x000001E9E302F000-memory.dmp
memory/2988-189-0x00007FFEF6300000-0x00007FFEF73B0000-memory.dmp
memory/2988-243-0x00007FFEF6300000-0x00007FFEF73B0000-memory.dmp
memory/2988-297-0x00007FFEF6300000-0x00007FFEF73B0000-memory.dmp
memory/2988-324-0x00007FFEF6300000-0x00007FFEF73B0000-memory.dmp
memory/2988-351-0x00007FFEF6300000-0x00007FFEF73B0000-memory.dmp