Analysis
- max time kernel
148s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
22/08/2026, 12:13
General
- Target [TakeMetal.org] Hulder - Verbolgen (2026)\02. The Crowning.mp3
- Size 14.9MB
- Sample260822-pd732stfpb
- SHA256 a09d80cf3624bb1de413172931f582335f81f92ad9b9771a3a03977d250e8a57
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 5 IoCs
- Suspicious use of SendNotifyMessage 4 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\[TakeMetal.org] Hulder - Verbolgen (2026)\02. The Crowning.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2772-0-0x00007FFDA6B3D000-0x00007FFDA6B3F000-memory.dmp
memory/2772-1-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-2-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-3-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-6-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-5-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-4-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-7-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-8-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-10-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-9-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-12-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-11-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-14-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-15-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-13-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-16-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-17-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-19-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-18-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-22-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-21-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-23-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-29-0x00007FFDA6890000-0x00007FFDA6B46000-memory.dmp
memory/2772-30-0x00007FF7943D0000-0x00007FF7944C8000-memory.dmp
memory/2772-36-0x00007FFDB73D0000-0x00007FFDB73FB000-memory.dmp
memory/2772-35-0x00007FFDB7400000-0x00007FFDB7422000-memory.dmp
memory/2772-38-0x00007FFDB73B0000-0x00007FFDB73C4000-memory.dmp
memory/2772-39-0x00007FFDB7390000-0x00007FFDB73A1000-memory.dmp
memory/2772-40-0x00007FFDB0480000-0x00007FFDB0552000-memory.dmp
memory/2772-41-0x00007FFDA4FD0000-0x00007FFDA5266000-memory.dmp
memory/2772-42-0x00007FFDA9730000-0x00007FFDA9818000-memory.dmp
memory/2772-55-0x00007FFDACB40000-0x00007FFDACB65000-memory.dmp
memory/2772-52-0x00007FFDA4DC0000-0x00007FFDA4FCB000-memory.dmp
memory/2772-54-0x00007FFDACFA0000-0x00007FFDACFEF000-memory.dmp
memory/2772-59-0x00007FFD9F010000-0x00007FFD9F255000-memory.dmp
memory/2772-58-0x00000285EA0D0000-0x00000285EA460000-memory.dmp
memory/2772-56-0x00007FFDA6E10000-0x00007FFDA6EBB000-memory.dmp
memory/2772-53-0x00007FFDA9690000-0x00007FFDA9728000-memory.dmp
memory/2772-57-0x00007FFDB0460000-0x00007FFDB047B000-memory.dmp
memory/2772-43-0x00007FFDA8250000-0x00007FFDA8333000-memory.dmp
memory/2772-51-0x00007FFDB0590000-0x00007FFDB05A1000-memory.dmp
memory/2772-49-0x00007FFDB4850000-0x00007FFDB486A000-memory.dmp
memory/2772-48-0x00007FFDACFF0000-0x00007FFDAD01D000-memory.dmp
memory/2772-47-0x00007FFDB6810000-0x00007FFDB6836000-memory.dmp
memory/2772-46-0x00007FFDB7300000-0x00007FFDB7318000-memory.dmp
memory/2772-45-0x00007FFDB7360000-0x00007FFDB738F000-memory.dmp
memory/2772-44-0x00007FFDAFE10000-0x00007FFDAFE51000-memory.dmp
memory/2772-50-0x00007FFDB26E0000-0x00007FFDB26F1000-memory.dmp
memory/2772-37-0x00007FFDA5270000-0x00007FFDA5600000-memory.dmp
memory/2772-34-0x00007FFDB7640000-0x00007FFDB7659000-memory.dmp
memory/2772-33-0x00007FFDB7D50000-0x00007FFDB7D61000-memory.dmp
memory/2772-31-0x00007FFDB7660000-0x00007FFDB7694000-memory.dmp