Analysis
- max time kernel
148s - max time network
157s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
02/08/2026, 14:41
General
- Target Wick10k Zenology Bank @wick_kid_beats/OneShots/WantItAll - Synth Polykey.wav
- Size 738KB
- Sample260802-r2taxabr21
- SHA256 26024e787bf98e49bbcb3cd9919b605530ac9bf9430358c9034427aaa072e318
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Wick10k Zenology Bank @wick_kid_beats\OneShots\WantItAll - Synth Polykey.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5608-0-0x00007FFBCBB0D000-0x00007FFBCBB0F000-memory.dmp
memory/5608-1-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-2-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-3-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-5-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-7-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-8-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-6-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-4-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-9-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-12-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-14-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-13-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-11-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-10-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-15-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-16-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-17-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-18-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-19-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-20-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-25-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-26-0x00007FFBCB860000-0x00007FFBCBB16000-memory.dmp
memory/5608-28-0x00007FFBDE980000-0x00007FFBDE9B4000-memory.dmp
memory/5608-27-0x00007FF6B37F0000-0x00007FF6B38E8000-memory.dmp
memory/5608-33-0x00007FFBDA1C0000-0x00007FFBDA1EB000-memory.dmp
memory/5608-32-0x00007FFBDC820000-0x00007FFBDC842000-memory.dmp
memory/5608-31-0x00007FFBDC850000-0x00007FFBDC869000-memory.dmp
memory/5608-36-0x00007FFBD63F0000-0x00007FFBD6401000-memory.dmp
memory/5608-34-0x00007FFBCB1B0000-0x00007FFBCB540000-memory.dmp
memory/5608-45-0x00007FFBD5EA0000-0x00007FFBD5ECD000-memory.dmp
memory/5608-48-0x00007FFBD42C0000-0x00007FFBD42D1000-memory.dmp
memory/5608-46-0x00007FFBD5E80000-0x00007FFBD5E9A000-memory.dmp
memory/5608-58-0x00007FFBC4A20000-0x00007FFBC4C65000-memory.dmp
memory/5608-49-0x00007FFBCAD00000-0x00007FFBCAF0B000-memory.dmp
memory/5608-57-0x0000026F3A470000-0x0000026F3A481000-memory.dmp
memory/5608-55-0x0000026F39DD0000-0x0000026F39DE2000-memory.dmp
memory/5608-54-0x00007FFBD3D20000-0x00007FFBD3D3B000-memory.dmp
memory/5608-53-0x00007FFBD1E50000-0x00007FFBD1EFB000-memory.dmp
memory/5608-52-0x00007FFBD4290000-0x00007FFBD42B5000-memory.dmp
memory/5608-51-0x00007FFBD3D40000-0x00007FFBD3D8F000-memory.dmp
memory/5608-50-0x00007FFBD2090000-0x00007FFBD2128000-memory.dmp
memory/5608-41-0x00007FFBD63A0000-0x00007FFBD63E1000-memory.dmp
memory/5608-40-0x00007FFBCDC80000-0x00007FFBCDD63000-memory.dmp
memory/5608-47-0x00007FFBD5790000-0x00007FFBD57A1000-memory.dmp
memory/5608-44-0x00007FFBD5F60000-0x00007FFBD5F86000-memory.dmp
memory/5608-56-0x0000026F39DF0000-0x0000026F39E01000-memory.dmp
memory/5608-42-0x00007FFBD6370000-0x00007FFBD639F000-memory.dmp
memory/5608-39-0x00007FFBD0E10000-0x00007FFBD0EF8000-memory.dmp
memory/5608-37-0x00007FFBD1F00000-0x00007FFBD1FD2000-memory.dmp
memory/5608-38-0x00007FFBCAF10000-0x00007FFBCB1A6000-memory.dmp
memory/5608-43-0x00007FFBD5F90000-0x00007FFBD5FA8000-memory.dmp
memory/5608-35-0x00007FFBD6410000-0x00007FFBD6424000-memory.dmp
memory/5608-30-0x00007FFBDC870000-0x00007FFBDC881000-memory.dmp