General
- Target vlc1.zip
- Size 1.3MB
- Sample260820-rhphls11et
- SHA256 a0ae1d6adf7d46298c5b18e888accc4d9edbf31aa85b5a01330e2593aadab51f
- MD5 da3b10eae69c4c2980fc4234afa18c64
- SHA1 3689f3ba6af779cf97b28be38605fecae8704ccd
- SHA512 6a2f17d6e51b320206f5d0c9560cd9559bdf32aaf555522ccd825daa2c991f6a0e87df5ce49e2f215b435aac6b735b68d48513017a812a46b342618e641c5f7d
- SSDEEP 24576:N5DGyinACPFht29HTkz9L5RAElFtiwzjtD8UjbooAFIi4RE3badqTQ3ftGoHaoRD:NoySDFf2dTkz9LrtQUjbvWIi4RoUqkvl
- TLSH T1885533F914663894D7F86928DA77263DBDF15AF1786103662DECECCB0C81C2580AE1B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
libvlc.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
libvlc.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
vlc.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral4
Sample
vlc.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target libvlc.dll
- Size 1.7MB
- SHA256 c0932e0789c154b7af7ea40eac4d9a5e050d3978d4550afbdfb83a08baa70161
- MD5 9d75863563ba83642b72c90594af31e6
- SHA1 998240c0f55f51c713db24399acb29701d92ef9c
- SHA512 9ff05738eb30a5639ef00feb4423055fdc1e72a444e1fbd90fd1c10d0d7c686e919933950015ab879ecd1f2a42b220f27b667b0fdd8b52c09a70dc102470e946
- SSDEEP 49152:btUgORNrBPta5OZl/j6nOdA31B3pxHsNWovP:8rRta5OZl/+nh31lpxcX
- TLSH T12E85C0A86FD025F0E2F4CDB1CB6BB6B4537F362F2D416BA7012092753E7215AAA43C15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target vlc.exe
- Size 1021KB
- SHA256 bfa5740f028a8f310ca01c779bbc5f2f1b435c41539c54de592f715bb0c10389
- MD5 f0a4d5c3492115bfe2f346bc7bdce396
- SHA1 bfcbdc7d0cbb92b68d348090fe9f381b4358a587
- SHA512 8e4b2e1852fbc821cab4a7c16675afbfa2588472faa1848600829c415bfbee7cbf4713568ba15a76916e6c761d79b0fff7c5a1ae087aabd912bb7063d38a560a
- SSDEEP 24576:uGKuKkPztKt9cHPrLRAqKBAy1N1UGAmnnnFnnnZnnnGnnnsddodt:uGKuKkPzgt9cHTLRAqK81k8
- TLSH T1A9254B1BE7A345EDC56FC13487A7C772AA30B86942347E2E1D95DB221F10E609F2E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
1Credentials in Registry
1