Analysis
- geolocation tags
eueuropefrfrance - max time kernel
84s - max time network
67s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 20:30
Static task
static1
Behavioral task
behavioral1
Sample
Inst.ogg
Resource
win10v2004-20260513-en
18 signatures
900 seconds
Behavioral task
behavioral2
Sample
Inst.ogg
Resource
win11ltsc2024-20260709-en
5 signatures
900 seconds
General
- Target Inst.ogg
- Size 1.5MB
- Sample260730-zaemfafc72
- SHA256 cfeae13a0b09d466156ac159809f658b7f96a95bf97ac88bbe8e0688618e4c29
- MD5 ce795ea861d2089bf9f72e7e0803ce31
- SHA1 378015469d02aa045540601ce1963fb0df416ccd
- SHA512 2187771ac09a9121c274a16cbfb2495103d445b440a4a2f8d632a076bc967d00594369ad0cf9f6c422a7bff249a471d5c2aafff46824575bd8d4673ac47335cb
- SSDEEP 24576:Cx2m63+eEPtCHC1ir275iV0SS9rgZHcoH6sqQdNaj0zGGUY3Hfif:CImfeC1O275iVfurghaF0zGG/3U
- TLSH T11A65331D09C19E6BC6D63ABB32A55A2632CDCE7BCF680D838FC0789DA5BE5701D4150B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4252 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4252 vlc.exe - Suspicious use of FindShellTrayWindow 8 IoCs
pid Process 4252 vlc.exe 4252 vlc.exe 4252 vlc.exe 4252 vlc.exe 4252 vlc.exe 4252 vlc.exe 4252 vlc.exe 4252 vlc.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 4252 vlc.exe 4252 vlc.exe 4252 vlc.exe 4252 vlc.exe 4252 vlc.exe 4252 vlc.exe 4252 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4252 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Inst.ogg"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4252