Analysis
- max time kernel
148s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
22/08/2026, 12:13
General
- Target [TakeMetal.org] Hulder - Verbolgen (2026)\03. Thy Binding Oath.mp3
- Size 13.0MB
- Sample260822-pd732stfpb
- SHA256 befc6593bcb82465ccd070b9744070bab1ed7e590d78ccc9b86eb144b9d5a0b1
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 6 IoCs
- Suspicious use of SendNotifyMessage 5 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\[TakeMetal.org] Hulder - Verbolgen (2026)\03. Thy Binding Oath.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3244-0-0x00007FF9CF8AD000-0x00007FF9CF8AF000-memory.dmp
memory/3244-1-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-2-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-3-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-4-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-5-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-6-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-8-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-10-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-9-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-7-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-11-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-13-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-14-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-20-0x00007FF9CF600000-0x00007FF9CF8B6000-memory.dmp
memory/3244-21-0x00007FF791620000-0x00007FF791718000-memory.dmp
memory/3244-22-0x00007FF9DA960000-0x00007FF9DA994000-memory.dmp
memory/3244-25-0x00007FF9E1110000-0x00007FF9E1129000-memory.dmp
memory/3244-27-0x00007FF9DA550000-0x00007FF9DA57B000-memory.dmp
memory/3244-31-0x00007FF9DA290000-0x00007FF9DA362000-memory.dmp
memory/3244-32-0x00007FF9CED80000-0x00007FF9CF016000-memory.dmp
memory/3244-33-0x00007FF9D6030000-0x00007FF9D6118000-memory.dmp
memory/3244-42-0x00007FF9D7310000-0x00007FF9D7321000-memory.dmp
memory/3244-41-0x00007FF9D7330000-0x00007FF9D7341000-memory.dmp
memory/3244-34-0x00007FF9D3FE0000-0x00007FF9D40C3000-memory.dmp
memory/3244-47-0x00007FF9D2080000-0x00007FF9D212B000-memory.dmp
memory/3244-43-0x00007FF9CEB70000-0x00007FF9CED7B000-memory.dmp
memory/3244-48-0x00007FF9D5F70000-0x00007FF9D5F8B000-memory.dmp
memory/3244-50-0x00007FF9C8D10000-0x00007FF9C8F55000-memory.dmp
memory/3244-49-0x0000026710C00000-0x0000026710EDB000-memory.dmp
memory/3244-46-0x00007FF9D72E0000-0x00007FF9D7305000-memory.dmp
memory/3244-45-0x00007FF9D3F90000-0x00007FF9D3FDF000-memory.dmp
memory/3244-44-0x00007FF9D5F90000-0x00007FF9D6028000-memory.dmp
memory/3244-40-0x00007FF9D7350000-0x00007FF9D736A000-memory.dmp
memory/3244-39-0x00007FF9D81E0000-0x00007FF9D820D000-memory.dmp
memory/3244-38-0x00007FF9D8210000-0x00007FF9D8236000-memory.dmp
memory/3244-37-0x00007FF9DA270000-0x00007FF9DA288000-memory.dmp
memory/3244-36-0x00007FF9DA520000-0x00007FF9DA54F000-memory.dmp
memory/3244-35-0x00007FF9D8290000-0x00007FF9D82D1000-memory.dmp
memory/3244-28-0x00007FF9CF020000-0x00007FF9CF3B0000-memory.dmp
memory/3244-30-0x00007FF9DA940000-0x00007FF9DA951000-memory.dmp
memory/3244-29-0x00007FF9DFCC0000-0x00007FF9DFCD4000-memory.dmp
memory/3244-26-0x00007FF9E0C70000-0x00007FF9E0C92000-memory.dmp
memory/3244-24-0x00007FF9E15F0000-0x00007FF9E1601000-memory.dmp