Analysis
- user interaction
yes - max time kernel
149s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
15/08/2026, 14:53
General
- Target TravellersRest.exe
- Size 890KB
- Sample260815-r9cccsgd72
- SHA256 1ef271b76634c12000e3dda4ba6fd08d54210c5e2ceade434434e3cc594dc616
Malware Config
Signatures
- Modifies registry class 1 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 64 IoCs
- Suspicious use of SendNotifyMessage 64 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\TravellersRest.exe"C:\Users\Admin\AppData\Local\Temp\TravellersRest.exe"1⤵
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\SkipExport.ram"1⤵
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
vlc-qt-interface.ini.lock
memory/5436-0-0x00007FF9C3C5D000-0x00007FF9C3C5F000-memory.dmp
memory/5436-1-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-2-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-3-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-4-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-5-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-7-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-6-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-8-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-9-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-10-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-11-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-13-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-12-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-14-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-15-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-20-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-21-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-23-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-22-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-28-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-38-0x00007FF9DE150000-0x00007FF9DE184000-memory.dmp
memory/5436-40-0x00007FF9DCC70000-0x00007FF9DCC81000-memory.dmp
memory/5436-37-0x00007FF67C870000-0x00007FF67C968000-memory.dmp
memory/5436-41-0x00007FF9DAE30000-0x00007FF9DAE49000-memory.dmp
memory/5436-39-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-46-0x00007FF9D6300000-0x00007FF9D6311000-memory.dmp
memory/5436-45-0x00007FF9D6B70000-0x00007FF9D6B84000-memory.dmp
memory/5436-51-0x00007FF9D62B0000-0x00007FF9D62F1000-memory.dmp
memory/5436-50-0x00007FF9C3040000-0x00007FF9C3123000-memory.dmp
memory/5436-59-0x00007FF9C2E30000-0x00007FF9C303B000-memory.dmp
memory/5436-64-0x00007FF9D1160000-0x00007FF9D117B000-memory.dmp
memory/5436-63-0x00007FF9C2D80000-0x00007FF9C2E2B000-memory.dmp
memory/5436-62-0x00007FF9CB9C0000-0x00007FF9CB9E5000-memory.dmp
memory/5436-61-0x00007FF9CFE20000-0x00007FF9CFE6F000-memory.dmp
memory/5436-65-0x00007FF9B9730000-0x00007FF9B9975000-memory.dmp
memory/5436-60-0x00007FF9C7E40000-0x00007FF9C7ED8000-memory.dmp
memory/5436-49-0x00007FF9C7EE0000-0x00007FF9C7FC8000-memory.dmp
memory/5436-58-0x00007FF9D11A0000-0x00007FF9D11B1000-memory.dmp
memory/5436-57-0x00007FF9D5110000-0x00007FF9D5121000-memory.dmp
memory/5436-56-0x00007FF9D5130000-0x00007FF9D514A000-memory.dmp
memory/5436-55-0x00007FF9D56C0000-0x00007FF9D56ED000-memory.dmp
memory/5436-52-0x00007FF9D6280000-0x00007FF9D62AF000-memory.dmp
memory/5436-44-0x00007FF9C33D0000-0x00007FF9C3760000-memory.dmp
memory/5436-48-0x0000028629600000-0x0000028629896000-memory.dmp
memory/5436-54-0x00007FF9D56F0000-0x00007FF9D5716000-memory.dmp
memory/5436-53-0x00007FF9D5AA0000-0x00007FF9D5AB8000-memory.dmp
memory/5436-47-0x00007FF9C8460000-0x00007FF9C8532000-memory.dmp
memory/5436-43-0x00007FF9D6320000-0x00007FF9D634B000-memory.dmp
memory/5436-42-0x00007FF9D7930000-0x00007FF9D7952000-memory.dmp
memory/5436-70-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp
memory/5436-246-0x00007FF9DE150000-0x00007FF9DE184000-memory.dmp
memory/5436-245-0x00007FF67C870000-0x00007FF67C968000-memory.dmp
memory/5436-248-0x00007FF9C39B0000-0x00007FF9C3C66000-memory.dmp