Analysis
- max time kernel
149s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/07/2026, 22:59
Static task
static1
Behavioral task
behavioral1
Sample
ePGxcAvZ9m.mov
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
ePGxcAvZ9m.mov
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
General
- Target ePGxcAvZ9m.mov
- Size 478KB
- Sample260731-2ynlcsak7w
- SHA256 375fc94e1c729f99732b2f13e8786e84e80df2a7107da3389c26f9c1b366f4c8
- MD5 19ea7e76c78f8587ed9513ab497a53d0
- SHA1 f70f405a85f50244b806acd64cb12fc86af6caf7
- SHA512 5e1ace277d55ab5290929c94f0de87247059f08a26b3afc611bd75576afec94a304565441218fc3fa7bc8e3d6496ee49e92b54b9742038997685c9ca3b49aec9
- SSDEEP 12288:ovd6Lra16m0rs0jhL/pkrnF/Q39nTmBzzc8:Wd6LE6mwjhL/p4VOn+fc8
- TLSH T191A42374BF721076CF5DC0F418F443E16EB0A051CBDAC90156194E76AFA8A47BADEAC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 5660 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5660 vlc.exe - Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe - Suspicious use of SendNotifyMessage 8 IoCs
pid Process 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe 5660 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\ePGxcAvZ9m.mov"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:5660