Analysis
- user interaction
yes - max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
12/08/2026, 19:42
General
- Target VencordInstaller.exe
- Size 9.9MB
- Sample260812-ye478atema
- SHA256 dc0826657a005009f43bdc3a0933d08352f8b22b2b9b961697a2db6e9913e871
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\VencordInstaller.exe"C:\Users\Admin\AppData\Local\Temp\VencordInstaller.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\UnblockHide.TTS"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1444-0-0x00007FF7AF090000-0x00007FF7B0309000-memory.dmp
memory/3368-1-0x00007FFA8DFED000-0x00007FFA8DFEF000-memory.dmp
memory/3368-2-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-3-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-4-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-5-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-6-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-7-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-9-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-8-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-11-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-12-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-10-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-13-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-14-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-17-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-22-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-23-0x00007FFA8DD40000-0x00007FFA8DFF6000-memory.dmp
memory/3368-25-0x00007FFA9B900000-0x00007FFA9B934000-memory.dmp
memory/3368-24-0x00007FF7712D0000-0x00007FF7713C8000-memory.dmp
memory/3368-30-0x00007FFA8E690000-0x00007FFA8E6BB000-memory.dmp
memory/3368-29-0x00007FFA8E6C0000-0x00007FFA8E6E2000-memory.dmp
memory/3368-28-0x00007FFA9B220000-0x00007FFA9B239000-memory.dmp
memory/3368-32-0x00007FFA9B200000-0x00007FFA9B214000-memory.dmp
memory/3368-33-0x00007FFA95D60000-0x00007FFA95D71000-memory.dmp
memory/3368-34-0x00007FFA8D170000-0x00007FFA8D242000-memory.dmp
memory/3368-31-0x00007FFA8D250000-0x00007FFA8D5E0000-memory.dmp
memory/3368-27-0x00007FFA9C710000-0x00007FFA9C721000-memory.dmp
memory/3368-35-0x00007FFA8CED0000-0x00007FFA8D166000-memory.dmp
memory/3368-38-0x00007FFA8E640000-0x00007FFA8E681000-memory.dmp
memory/3368-45-0x00007FFA8CBE0000-0x00007FFA8CBF1000-memory.dmp
memory/3368-44-0x00007FFA8CC00000-0x00007FFA8CC11000-memory.dmp
memory/3368-47-0x00007FFA8C930000-0x00007FFA8C9C8000-memory.dmp
memory/3368-52-0x00007FFA8C7C0000-0x00007FFA8C7D2000-memory.dmp
memory/3368-51-0x00007FFA8C7E0000-0x00007FFA8C7FB000-memory.dmp
memory/3368-56-0x0000019851180000-0x0000019851191000-memory.dmp
memory/3368-57-0x00007FFA83310000-0x00007FFA83555000-memory.dmp
memory/3368-53-0x00000198511E0000-0x0000019852A4F000-memory.dmp
memory/3368-55-0x000001984F300000-0x000001984F330000-memory.dmp
memory/3368-54-0x0000019851130000-0x000001985117D000-memory.dmp
memory/3368-50-0x00007FFA8C800000-0x00007FFA8C8AB000-memory.dmp
memory/3368-49-0x00007FFA8C8B0000-0x00007FFA8C8D5000-memory.dmp
memory/3368-48-0x00007FFA8C8E0000-0x00007FFA8C92F000-memory.dmp
memory/3368-46-0x00007FFA8C9D0000-0x00007FFA8CBDB000-memory.dmp
memory/3368-43-0x00007FFA8CC20000-0x00007FFA8CC3A000-memory.dmp
memory/3368-42-0x00007FFA8CC40000-0x00007FFA8CC6D000-memory.dmp
memory/3368-41-0x00007FFA8CC70000-0x00007FFA8CC96000-memory.dmp
memory/3368-40-0x00007FFA8CCA0000-0x00007FFA8CCB8000-memory.dmp
memory/3368-39-0x00007FFA8CCC0000-0x00007FFA8CCEF000-memory.dmp
memory/3368-37-0x00007FFA8CCF0000-0x00007FFA8CDD3000-memory.dmp
memory/3368-36-0x00007FFA8CDE0000-0x00007FFA8CEC8000-memory.dmp