Analysis
- max time kernel
900s - max time network
429s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
11/08/2026, 03:23
Static task
static1
Behavioral task
behavioral1
Sample
Rap.mp3
Resource
win10v2004-20260513-en
6 signatures
900 seconds
Behavioral task
behavioral2
Sample
Rap.mp3
Resource
win10ltsc2021-20260513-en
5 signatures
900 seconds
General
- Target Rap.mp3
- Size 1.3MB
- Sample260811-dxt5rafj6z
- SHA256 494b3e34e38dba6688b3efe56a2ebc115078d140cc6c92bd464b46c0bdb8b402
- MD5 8accf236b17b191fdc10257d33a05440
- SHA1 bfd1782f17dacda05a4757918a9d54a820eac1c1
- SHA512 d4dc7c35fce1a948fe1831408bca500a42b096877cad65eafac2171d6ddf5e48c00c5b1c7d6495ed539ffbe8b7b241d5e222acd84953c8f4ae9722ab70a4915c
- SSDEEP 24576:xh+dudQ5ok52a1i3h4F3B2SDR5iwbzZWnkc6vGa0ET81bmTb93GHR:xh+dbok5zNF3B24T9W5eLb4HR
- TLSH T14A55128A1BA1659AB0801F7C388FF473C451BF0D5C69DFC55814EB6284BFB46BB3A14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3520 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3520 vlc.exe - Suspicious use of FindShellTrayWindow 8 IoCs
pid Process 3520 vlc.exe 3520 vlc.exe 3520 vlc.exe 3520 vlc.exe 3520 vlc.exe 3520 vlc.exe 3520 vlc.exe 3520 vlc.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 3520 vlc.exe 3520 vlc.exe 3520 vlc.exe 3520 vlc.exe 3520 vlc.exe 3520 vlc.exe 3520 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3520 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Rap.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3520