Analysis
- max time kernel
149s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
22/08/2026, 12:13
General
- Target [TakeMetal.org] Hulder - Verbolgen (2026)\05. ...And We Shall Sing.mp3
- Size 13.8MB
- Sample260822-pd732stfpb
- SHA256 50b22ce2d1091fbeb6befccf2c6a7e5b9704a82c30125c2612c400e0700d7c97
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 6 IoCs
- Suspicious use of SendNotifyMessage 5 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\[TakeMetal.org] Hulder - Verbolgen (2026)\05. ...And We Shall Sing.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/292-0-0x00007FFFBA68D000-0x00007FFFBA68F000-memory.dmp
memory/292-2-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-1-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-3-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-5-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-4-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-6-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-7-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-8-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-9-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-10-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-12-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-11-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-15-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-14-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-16-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-22-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-23-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-24-0x00007FF64EFC0000-0x00007FF64F0B8000-memory.dmp
memory/292-28-0x00007FFFD1B70000-0x00007FFFD1B89000-memory.dmp
memory/292-29-0x00007FFFCB660000-0x00007FFFCB682000-memory.dmp
memory/292-30-0x00007FFFCB630000-0x00007FFFCB65B000-memory.dmp
memory/292-31-0x00007FFFB95A0000-0x00007FFFB9930000-memory.dmp
memory/292-25-0x00007FFFD01B0000-0x00007FFFD01E4000-memory.dmp
memory/292-27-0x00007FFFD1E60000-0x00007FFFD1E71000-memory.dmp
memory/292-33-0x00007FFFCB5F0000-0x00007FFFCB601000-memory.dmp
memory/292-32-0x00007FFFCB610000-0x00007FFFCB624000-memory.dmp
memory/292-34-0x00007FFFBD7E0000-0x00007FFFBD8B2000-memory.dmp
memory/292-35-0x00007FFFB9300000-0x00007FFFB9596000-memory.dmp
memory/292-36-0x00007FFFBA9F0000-0x00007FFFBAAD8000-memory.dmp
memory/292-43-0x00007FFFCA510000-0x00007FFFCA52A000-memory.dmp
memory/292-45-0x00007FFFC88F0000-0x00007FFFC8901000-memory.dmp
memory/292-51-0x00007FFFC1940000-0x00007FFFC195B000-memory.dmp
memory/292-52-0x000002B8E0C70000-0x000002B8E1000000-memory.dmp
memory/292-53-0x00007FFFB31D0000-0x00007FFFB3415000-memory.dmp
memory/292-46-0x00007FFFB90F0000-0x00007FFFB92FB000-memory.dmp
memory/292-50-0x00007FFFB9040000-0x00007FFFB90EB000-memory.dmp
memory/292-49-0x00007FFFC1EC0000-0x00007FFFC1EE5000-memory.dmp
memory/292-48-0x00007FFFBA9A0000-0x00007FFFBA9EF000-memory.dmp
memory/292-47-0x00007FFFBD740000-0x00007FFFBD7D8000-memory.dmp
memory/292-44-0x00007FFFC9220000-0x00007FFFC9231000-memory.dmp
memory/292-42-0x00007FFFC2210000-0x00007FFFC223D000-memory.dmp
memory/292-41-0x00007FFFC2430000-0x00007FFFC2456000-memory.dmp
memory/292-40-0x00007FFFCB3B0000-0x00007FFFCB3C8000-memory.dmp
memory/292-39-0x00007FFFCB5C0000-0x00007FFFCB5EF000-memory.dmp
memory/292-37-0x00007FFFBA0A0000-0x00007FFFBA183000-memory.dmp
memory/292-38-0x00007FFFC1F50000-0x00007FFFC1F91000-memory.dmp
memory/292-56-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-86-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp
memory/292-206-0x00007FFFBA3E0000-0x00007FFFBA696000-memory.dmp