Analysis
- max time kernel
150s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 06:05
Static task
static1
Behavioral task
behavioral1
Sample
6996.webm
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
6996.webm
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
General
- Target 6996.webm
- Size 9.1MB
- Sample260808-gtdkdaca85
- SHA256 df25dec869b5a280f6d39daf6ff9b4572bb6eca695ca487b8238c674c44260c4
- MD5 b78995aec17320dac856681dbed40e1a
- SHA1 3382224dd6ed8c9507db36701eec126adad68eb8
- SHA512 30eec987d0d3150477bef112fb044481cc96d11f92473da09e56e9e5b56e19d6225dbb55577003d952460a15a990494eb0ab623aa731ae2dcf7e4fd6acdd8515
- SSDEEP 196608:+qzDcQdRuzd6mRJ1fiwlcqjfiouLuCCfZc/:+ATkRJVfjMyCX
- TLSH T105A623F4AA2864C2F015B53EE9335243EA76C575D76EDE012CE487E0BD13A50A076BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4376 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4376 vlc.exe - Suspicious use of FindShellTrayWindow 30 IoCs
pid Process 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe - Suspicious use of SendNotifyMessage 5 IoCs
pid Process 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe - Suspicious use of SetWindowsHookEx 7 IoCs
pid Process 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe 4376 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\6996.webm"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4376