Analysis
- max time kernel
149s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
02/08/2026, 14:41
General
- Target Wick10k Zenology Bank @wick_kid_beats/OneShots/WeatherReport - Pulsating.wav
- Size 2.7MB
- Sample260802-r2taxabr21
- SHA256 7a8b65c6de7ab7edaed941e0fc6c1d4484c215e27ceffc9b8c7f2e90390dd379
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Wick10k Zenology Bank @wick_kid_beats\OneShots\WeatherReport - Pulsating.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5888-0-0x00007FFD3777D000-0x00007FFD3777F000-memory.dmp
memory/5888-1-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-2-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-3-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-4-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-5-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-6-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-10-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-9-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-11-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-12-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-13-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-8-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-7-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-14-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-15-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-16-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-17-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-19-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-18-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-24-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-25-0x00007FF6D37F0000-0x00007FF6D38E8000-memory.dmp
memory/5888-30-0x00007FFD49AD0000-0x00007FFD49AF2000-memory.dmp
memory/5888-31-0x00007FFD49AA0000-0x00007FFD49ACB000-memory.dmp
memory/5888-29-0x00007FFD4A690000-0x00007FFD4A6A9000-memory.dmp
memory/5888-34-0x00007FFD49A60000-0x00007FFD49A71000-memory.dmp
memory/5888-33-0x00007FFD49A80000-0x00007FFD49A94000-memory.dmp
memory/5888-35-0x00007FFD423F0000-0x00007FFD424C2000-memory.dmp
memory/5888-36-0x00007FFD36C50000-0x00007FFD36EE6000-memory.dmp
memory/5888-37-0x00007FFD3DD10000-0x00007FFD3DDF8000-memory.dmp
memory/5888-52-0x00007FFD42380000-0x00007FFD4239B000-memory.dmp
memory/5888-55-0x00007FFD30B50000-0x00007FFD30D95000-memory.dmp
memory/5888-53-0x0000025741450000-0x000002574172B000-memory.dmp
memory/5888-54-0x0000025741730000-0x00000257417DD000-memory.dmp
memory/5888-47-0x00007FFD36A40000-0x00007FFD36C4B000-memory.dmp
memory/5888-51-0x00007FFD386D0000-0x00007FFD3877B000-memory.dmp
memory/5888-50-0x00007FFD40240000-0x00007FFD40265000-memory.dmp
memory/5888-49-0x00007FFD39A60000-0x00007FFD39AAF000-memory.dmp
memory/5888-48-0x00007FFD3DC70000-0x00007FFD3DD08000-memory.dmp
memory/5888-46-0x00007FFD423A0000-0x00007FFD423B1000-memory.dmp
memory/5888-44-0x00007FFD496C0000-0x00007FFD496DA000-memory.dmp
memory/5888-43-0x00007FFD423C0000-0x00007FFD423ED000-memory.dmp
memory/5888-40-0x00007FFD43210000-0x00007FFD4323F000-memory.dmp
memory/5888-38-0x00007FFD39AB0000-0x00007FFD39B93000-memory.dmp
memory/5888-45-0x00007FFD44D50000-0x00007FFD44D61000-memory.dmp
memory/5888-41-0x00007FFD49A40000-0x00007FFD49A58000-memory.dmp
memory/5888-42-0x00007FFD431E0000-0x00007FFD43206000-memory.dmp
memory/5888-39-0x00007FFD496E0000-0x00007FFD49721000-memory.dmp
memory/5888-32-0x00007FFD36EF0000-0x00007FFD37280000-memory.dmp
memory/5888-28-0x00007FFD4C7F0000-0x00007FFD4C801000-memory.dmp
memory/5888-26-0x00007FFD49B80000-0x00007FFD49BB4000-memory.dmp
memory/5888-56-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp
memory/5888-57-0x00007FFD374D0000-0x00007FFD37786000-memory.dmp