Analysis
- max time kernel
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
22/08/2026, 12:13
General
- Target [TakeMetal.org] Hulder - Verbolgen (2026)\01. Drie Raven (Intro).mp3
- Size 5.3MB
- Sample260822-pd732stfpb
- SHA256 00a445e2e0d0cbe25be3f8f1656a013d2b63c8dc4797afc59cc6019a4f243ebf
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\[TakeMetal.org] Hulder - Verbolgen (2026)\01. Drie Raven (Intro).mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5488-0-0x00007FFB3716D000-0x00007FFB3716F000-memory.dmp
memory/5488-1-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-2-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-3-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-4-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-5-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-6-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-7-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-8-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-9-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-10-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-11-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-12-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-13-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-14-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-16-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-17-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-15-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-20-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-19-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-22-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-21-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-28-0x00007FFB36EC0000-0x00007FFB37176000-memory.dmp
memory/5488-29-0x00007FF63BAC0000-0x00007FF63BBB8000-memory.dmp
memory/5488-35-0x00007FFB3B570000-0x00007FFB3B59B000-memory.dmp
memory/5488-34-0x00007FFB42580000-0x00007FFB425A2000-memory.dmp
memory/5488-33-0x00007FFB439B0000-0x00007FFB439C9000-memory.dmp
memory/5488-32-0x00007FFB46BF0000-0x00007FFB46C01000-memory.dmp
memory/5488-30-0x00007FFB42740000-0x00007FFB42774000-memory.dmp
memory/5488-38-0x00007FFB3F160000-0x00007FFB3F171000-memory.dmp
memory/5488-37-0x00007FFB42720000-0x00007FFB42734000-memory.dmp
memory/5488-36-0x00007FFB2FB80000-0x00007FFB2FF10000-memory.dmp
memory/5488-39-0x00007FFB3AD90000-0x00007FFB3AE62000-memory.dmp
memory/5488-40-0x00007FFB2F8E0000-0x00007FFB2FB76000-memory.dmp
memory/5488-41-0x00007FFB36B60000-0x00007FFB36C48000-memory.dmp
memory/5488-48-0x00007FFB3CB50000-0x00007FFB3CB6A000-memory.dmp
memory/5488-45-0x00007FFB3CFA0000-0x00007FFB3CFB8000-memory.dmp
memory/5488-47-0x00007FFB38C20000-0x00007FFB38C4D000-memory.dmp
memory/5488-51-0x00007FFB2F6D0000-0x00007FFB2F8DB000-memory.dmp
memory/5488-55-0x00007FFB34600000-0x00007FFB346AB000-memory.dmp
memory/5488-52-0x00007FFB37430000-0x00007FFB374C8000-memory.dmp
memory/5488-57-0x000001E94FAC0000-0x000001E94FE50000-memory.dmp
memory/5488-58-0x00007FFB298E0000-0x00007FFB29B25000-memory.dmp
memory/5488-56-0x00007FFB38E00000-0x00007FFB38E1B000-memory.dmp
memory/5488-54-0x00007FFB38BF0000-0x00007FFB38C15000-memory.dmp
memory/5488-53-0x00007FFB36E70000-0x00007FFB36EBF000-memory.dmp
memory/5488-46-0x00007FFB392B0000-0x00007FFB392D6000-memory.dmp
memory/5488-50-0x00007FFB39290000-0x00007FFB392A1000-memory.dmp
memory/5488-49-0x00007FFB3AD20000-0x00007FFB3AD31000-memory.dmp
memory/5488-44-0x00007FFB3B540000-0x00007FFB3B56F000-memory.dmp
memory/5488-42-0x00007FFB346B0000-0x00007FFB34793000-memory.dmp
memory/5488-43-0x00007FFB3AD40000-0x00007FFB3AD81000-memory.dmp