Analysis
- user interaction
yes - max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/08/2026, 22:29
Static task
static1
Behavioral task
behavioral1
Sample
doc_2026-07-26_05-02-23.mp4
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
General
- Target doc_2026-07-26_05-02-23.mp4
- Size 544KB
- Sample260822-2d67zazflb
- SHA256 8cc69c82e973f1a583d2ae6967206a9ea7f96507415d45b570029598b8badc0a
- MD5 cedba9327d17be3baf018803261a8867
- SHA1 24e23866fbd3038e83c0c4f05edb29b401a277cd
- SHA512 81cfbec84691aba6f39b64dcefdf2b9d13ee545d32bb6bd2ad6f5cb1d27601e24b8fef5b4d2358ee8d23a06f901af80f58ce4c53d38873aa9ad98ac5fbf6756b
- SSDEEP 12288:dfQ+dOKEAIOa5MHtM+s4PjMv1rpoh7LMGjdtv8hc3E/HLstm:dVdOKEAIh5MNM+vjM1p0HrhZz3E/rstm
- TLSH T1D7C4231FFFE1DD1CE9896DB9C887B94900E2D862E7E55221674C11AF6C0634D78CCAC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2424 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2424 vlc.exe - Suspicious use of FindShellTrayWindow 50 IoCs
pid Process 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe - Suspicious use of SendNotifyMessage 15 IoCs
pid Process 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe - Suspicious use of SetWindowsHookEx 7 IoCs
pid Process 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe 2424 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\doc_2026-07-26_05-02-23.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2424
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
- Size 100B
- SHA256 b184e9cb99668234d8353c831aafc5724812f6f6159121dadc2b5f61afb2576c
- MD5 0333a9073aaf595b06a250ba682a1ad4
- SHA1 b30ab5103847133d4fae751449ff5328a793fce7
- SHA512 ce34a668693c049bddba3931d93b5a277cac11be90418f89acf5073d148947d2b4832e3258d5cd02eb362d489e3a6b373ea8a3b2f006338dc3d6f404a841c7d0
- TLSH T155B01214C0F55326C6E40893A29C664F1165F408445473E0A76DE14C1110D9F7AC0678
- MD5 SHA1 SHA512 TLSH