Analysis
- max time kernel
148s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
22/08/2026, 12:13
General
- Target [TakeMetal.org] Hulder - Verbolgen (2026)\06. In Blood and in Earth.mp3
- Size 16.4MB
- Sample260822-pd732stfpb
- SHA256 a176af058b3f6fcdb934bf5d84cc7c50b79fd9c5bb7afec83115f52d89b02ea5
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 6 IoCs
- Suspicious use of SendNotifyMessage 5 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\[TakeMetal.org] Hulder - Verbolgen (2026)\06. In Blood and in Earth.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4148-0-0x00007FFDE938D000-0x00007FFDE938F000-memory.dmp
memory/4148-1-0x00007FFDE90E0000-0x00007FFDE9396000-memory.dmp
memory/4148-3-0x00007FFDE90E0000-0x00007FFDE9396000-memory.dmp
memory/4148-2-0x00007FFDE90E0000-0x00007FFDE9396000-memory.dmp
memory/4148-6-0x00007FFDE90E0000-0x00007FFDE9396000-memory.dmp
memory/4148-5-0x00007FFDE90E0000-0x00007FFDE9396000-memory.dmp
memory/4148-4-0x00007FFDE90E0000-0x00007FFDE9396000-memory.dmp
memory/4148-8-0x00007FFDE90E0000-0x00007FFDE9396000-memory.dmp
memory/4148-7-0x00007FFDE90E0000-0x00007FFDE9396000-memory.dmp
memory/4148-9-0x00007FFDE90E0000-0x00007FFDE9396000-memory.dmp
memory/4148-10-0x00007FFDE90E0000-0x00007FFDE9396000-memory.dmp
memory/4148-11-0x00007FFDE90E0000-0x00007FFDE9396000-memory.dmp
memory/4148-13-0x00007FFDE90E0000-0x00007FFDE9396000-memory.dmp
memory/4148-19-0x00007FFDE90E0000-0x00007FFDE9396000-memory.dmp
memory/4148-20-0x00007FFDE90E0000-0x00007FFDE9396000-memory.dmp
memory/4148-21-0x00007FF7D88E0000-0x00007FF7D89D8000-memory.dmp
memory/4148-27-0x00007FFDFB770000-0x00007FFDFB79B000-memory.dmp
memory/4148-26-0x00007FFDFBE00000-0x00007FFDFBE22000-memory.dmp
memory/4148-25-0x00007FFE01260000-0x00007FFE01279000-memory.dmp
memory/4148-24-0x00007FFE01950000-0x00007FFE01961000-memory.dmp
memory/4148-28-0x00007FFDE8D50000-0x00007FFDE90E0000-memory.dmp
memory/4148-31-0x00007FFDFB670000-0x00007FFDFB742000-memory.dmp
memory/4148-41-0x00007FFDFA860000-0x00007FFDFA871000-memory.dmp
memory/4148-34-0x00007FFDED230000-0x00007FFDED313000-memory.dmp
memory/4148-42-0x00007FFDFA840000-0x00007FFDFA851000-memory.dmp
memory/4148-39-0x00007FFDFB3D0000-0x00007FFDFB3FD000-memory.dmp
memory/4148-47-0x00007FFDEC2A0000-0x00007FFDEC34B000-memory.dmp
memory/4148-52-0x00007FFDE2CC0000-0x00007FFDE2F05000-memory.dmp
memory/4148-44-0x00007FFDF4010000-0x00007FFDF40A8000-memory.dmp
memory/4148-43-0x00007FFDE84E0000-0x00007FFDE86EB000-memory.dmp
memory/4148-51-0x000001DB01DD0000-0x000001DB01DE4000-memory.dmp
memory/4148-50-0x000001DB00460000-0x000001DB00475000-memory.dmp
memory/4148-49-0x000001DB01D30000-0x000001DB01DC4000-memory.dmp
memory/4148-48-0x00007FFDFA820000-0x00007FFDFA83B000-memory.dmp
memory/4148-45-0x00007FFDF4DD0000-0x00007FFDF4E1F000-memory.dmp
memory/4148-35-0x00007FFDFB620000-0x00007FFDFB661000-memory.dmp
memory/4148-33-0x00007FFDED5B0000-0x00007FFDED698000-memory.dmp
memory/4148-46-0x00007FFDFA600000-0x00007FFDFA625000-memory.dmp
memory/4148-36-0x00007FFDFB450000-0x00007FFDFB47F000-memory.dmp
memory/4148-40-0x00007FFDFB3B0000-0x00007FFDFB3CA000-memory.dmp
memory/4148-38-0x00007FFDFB400000-0x00007FFDFB426000-memory.dmp
memory/4148-37-0x00007FFDFB430000-0x00007FFDFB448000-memory.dmp
memory/4148-32-0x00007FFDE8AB0000-0x00007FFDE8D46000-memory.dmp
memory/4148-30-0x00007FFDFB750000-0x00007FFDFB761000-memory.dmp
memory/4148-29-0x00007FFDFCA70000-0x00007FFDFCA84000-memory.dmp
memory/4148-22-0x00007FFDFDA80000-0x00007FFDFDAB4000-memory.dmp