Analysis
- user interaction
yes - max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/08/2026, 02:15
Static task
static1
Behavioral task
behavioral1
Sample
Animal Company.url
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Animal Company.url
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target Animal Company.url
- Size 223B
- Sample260818-cpsfhsvvcx
- SHA256 bfbae1e72c5236f037572e4dc36243568c45e3415e74b227117ff447c3886eec
- MD5 afd4a5ec12f54e0f800877ef16cb5241
- SHA1 205038e910326d41e3306dae606952c5c76452fc
- SHA512 665f292fe0f700d4ec74087e7ed966b25457b47ed71955f525d6f163dc11b17efd0f94f6a351ac518ec5df78d77b9fb0d82d3aab0e5f436619a1a5315b72b3c8
- TLSH T1DDD0A758C9469191D352960B11A1FE56D84CF6A514DAD8CD23C5DB5B1D94980C408A59
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4720 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4720 vlc.exe - Suspicious use of FindShellTrayWindow 17 IoCs
pid Process 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe - Suspicious use of SendNotifyMessage 16 IoCs
pid Process 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe 4720 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4720 vlc.exe
Processes
-
C:\Windows\System32\rundll32.exe"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL "C:\Users\Admin\AppData\Local\Temp\Animal Company.url"1⤵PID:1060
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\ResetUpdate.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4720
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
- Size 77B
- SHA256 7c6b67bd9cf2efc7c178b1f0669fa3d12866045e9f0c95ccdab5c9d0deddd8fb
- MD5 8c74967728f3896cbdf0136d6ce6547f
- SHA1 c75800e29ee94146998f927d274122fbe72cdd0b
- SHA512 2fe394005cda896b5125625e020e9d9cd88ef09486fcd26e5f8d3b01ec41f7cb4c5d5a00ef677a26f8eec92d32ea60a6877cee4be8d5ca5dd4276d1efff9fbdf
- TLSH T143A012400004442A818000974119500E0522F8007408B0E19BC59402248086251C88B4
- MD5 SHA1 SHA512 TLSH