Resubmissions
09/08/2026, 22:46
260809-2p542swhmb709/08/2026, 22:43
260809-2nhx5aep2x709/08/2026, 22:39
260809-2kxbcaen8w7Analysis
- max time kernel
899s - max time network
445s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
09/08/2026, 22:39
General
- Target $TEMP/bgm.xm
- Size 620KB
- Sample260809-2kxbcaen8w
- SHA256 e386ff4d04afd77a9be93a8591606aa3d67e067c1da40a57a1ad9d255e38a613
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\$TEMP\bgm.xm"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3668-0-0x00007FFD098ED000-0x00007FFD098EF000-memory.dmp
memory/3668-1-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-2-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-3-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-4-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-5-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-6-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-7-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-8-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-9-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-10-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-11-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-16-0x00007FF6E33A0000-0x00007FF6E3498000-memory.dmp
memory/3668-21-0x00007FFD093E0000-0x00007FFD09402000-memory.dmp
memory/3668-22-0x00007FFD093B0000-0x00007FFD093DB000-memory.dmp
memory/3668-20-0x00007FFD09AD0000-0x00007FFD09AE9000-memory.dmp
memory/3668-19-0x00007FFD12FF0000-0x00007FFD13001000-memory.dmp
memory/3668-41-0x00007FFCF9C60000-0x00007FFCF9C85000-memory.dmp
memory/3668-40-0x00007FFCF90B0000-0x00007FFCF90FF000-memory.dmp
memory/3668-39-0x00007FFCF9100000-0x00007FFCF9198000-memory.dmp
memory/3668-38-0x00007FFCF91A0000-0x00007FFCF93AB000-memory.dmp
memory/3668-37-0x00007FFD00230000-0x00007FFD00241000-memory.dmp
memory/3668-36-0x00007FFD01300000-0x00007FFD01311000-memory.dmp
memory/3668-35-0x00007FFD08E40000-0x00007FFD08E5A000-memory.dmp
memory/3668-34-0x00007FFCFE240000-0x00007FFCFE26D000-memory.dmp
memory/3668-43-0x00000235B42E0000-0x00000235B42F7000-memory.dmp
memory/3668-46-0x00007FFCF2FD0000-0x00007FFCF3215000-memory.dmp
memory/3668-44-0x00000235B6110000-0x00000235B6133000-memory.dmp
memory/3668-42-0x00000235B61B0000-0x00000235B7A1F000-memory.dmp
memory/3668-45-0x00000235B6140000-0x00000235B6197000-memory.dmp
memory/3668-33-0x00007FFD08E60000-0x00007FFD08E86000-memory.dmp
memory/3668-32-0x00007FFD08E90000-0x00007FFD08EA8000-memory.dmp
memory/3668-31-0x00007FFD09030000-0x00007FFD0905F000-memory.dmp
memory/3668-30-0x00007FFD08EB0000-0x00007FFD08EF1000-memory.dmp
memory/3668-29-0x00007FFCF93B0000-0x00007FFCF9493000-memory.dmp
memory/3668-28-0x00007FFCF94A0000-0x00007FFCF9588000-memory.dmp
memory/3668-27-0x00007FFCF9590000-0x00007FFCF9826000-memory.dmp
memory/3668-23-0x00007FFCF9830000-0x00007FFCF9BC0000-memory.dmp
memory/3668-26-0x00007FFD08F00000-0x00007FFD08FD2000-memory.dmp
memory/3668-25-0x00007FFD09370000-0x00007FFD09381000-memory.dmp
memory/3668-24-0x00007FFD09390000-0x00007FFD093A4000-memory.dmp
memory/3668-17-0x00007FFD0DBF0000-0x00007FFD0DC24000-memory.dmp
memory/3668-111-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-142-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-204-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-297-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-328-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-390-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp
memory/3668-824-0x00007FFD09640000-0x00007FFD098F6000-memory.dmp