Analysis
- max time kernel
149s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
02/08/2026, 17:07
General
- Target CS2-Orbit-Resources-main/Airhorn.wav
- Size 776KB
- Sample260802-vm3gtattax
- SHA256 eeb4ff25976f46e026139c47062f139e13fadfa804c1d5bea297c42d718345c9
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\CS2-Orbit-Resources-main\Airhorn.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3248-0-0x00007FF8A1D6D000-0x00007FF8A1D6F000-memory.dmp
memory/3248-1-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-2-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-3-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-4-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-5-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-6-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-7-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-8-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-10-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-9-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-11-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-13-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-12-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-14-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-16-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-17-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-15-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-22-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-23-0x00007FF78E1B0000-0x00007FF78E2A8000-memory.dmp
memory/3248-29-0x00007FF8AD570000-0x00007FF8AD59B000-memory.dmp
memory/3248-27-0x00007FF8B0690000-0x00007FF8B06A9000-memory.dmp
memory/3248-26-0x00007FF8B34B0000-0x00007FF8B34C1000-memory.dmp
memory/3248-30-0x00007FF8A14E0000-0x00007FF8A1870000-memory.dmp
memory/3248-33-0x00007FF8A3950000-0x00007FF8A3A22000-memory.dmp
memory/3248-34-0x00007FF8A1240000-0x00007FF8A14D6000-memory.dmp
memory/3248-35-0x00007FF8A23E0000-0x00007FF8A24C8000-memory.dmp
memory/3248-25-0x00007FF8A1AC0000-0x00007FF8A1D76000-memory.dmp
memory/3248-32-0x00007FF8ACA90000-0x00007FF8ACAA1000-memory.dmp
memory/3248-31-0x00007FF8AD550000-0x00007FF8AD564000-memory.dmp
memory/3248-24-0x00007FF8AD5E0000-0x00007FF8AD614000-memory.dmp
memory/3248-28-0x00007FF8AE9E0000-0x00007FF8AEA02000-memory.dmp
memory/3248-43-0x00007FF8AA420000-0x00007FF8AA431000-memory.dmp
memory/3248-50-0x00007FF8AA090000-0x00007FF8AA0AB000-memory.dmp
memory/3248-49-0x00007FF8A38A0000-0x00007FF8A394B000-memory.dmp
memory/3248-44-0x00007FF8AA100000-0x00007FF8AA111000-memory.dmp
memory/3248-52-0x00007FF89AEC0000-0x00007FF89B105000-memory.dmp
memory/3248-51-0x000002B221AB0000-0x000002B221E40000-memory.dmp
memory/3248-46-0x00007FF8A8F80000-0x00007FF8A9018000-memory.dmp
memory/3248-48-0x00007FF8A9B20000-0x00007FF8A9B45000-memory.dmp
memory/3248-47-0x00007FF8AA0B0000-0x00007FF8AA0FF000-memory.dmp
memory/3248-45-0x00007FF8A1030000-0x00007FF8A123B000-memory.dmp
memory/3248-42-0x00007FF8AABC0000-0x00007FF8AABDA000-memory.dmp
memory/3248-41-0x00007FF8AA4E0000-0x00007FF8AA50D000-memory.dmp
memory/3248-40-0x00007FF8AA510000-0x00007FF8AA536000-memory.dmp
memory/3248-39-0x00007FF8ACA00000-0x00007FF8ACA18000-memory.dmp
memory/3248-38-0x00007FF8AABE0000-0x00007FF8AAC0F000-memory.dmp
memory/3248-36-0x00007FF8A1EF0000-0x00007FF8A1FD3000-memory.dmp
memory/3248-37-0x00007FF8ACA40000-0x00007FF8ACA81000-memory.dmp