Analysis
- user interaction
yes - max time kernel
148s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
26/08/2026, 11:16
Static task
static1
Behavioral task
behavioral1
Sample
kxgaRaHo.ts
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
kxgaRaHo.ts
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
General
- Target kxgaRaHo.ts
- Size 229KB
- Sample260826-nddc1axfkd
- SHA256 6ac587311530d9309452b8c017873ab5b92c810c606d82a2ee23a664c41ca59a
- MD5 84000faa35c49be807658bd714bdd685
- SHA1 ac3267a0805700c17010b8cc31ce846d8c5295a7
- SHA512 49ff965606f27439923f63b8e1ee0a7bd9730f901b4410d8b0e6a4f59a981b1dca70883721961d51f1833867962a456bbd5dcb03563d4018e5ca32ed4b2ffe2f
- SSDEEP 6144:xV7ipAL4dCgDVNZR2BK1Wc/v6d1t2WUToTI:mmL4dC2NZR284w6yTyI
- TLSH T11C3423E940BDF3E9A7631BCF04F72AD41A9335BFD850D00371886E7B4613ACA419A267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1496 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1496 vlc.exe - Suspicious use of FindShellTrayWindow 6 IoCs
pid Process 1496 vlc.exe 1496 vlc.exe 1496 vlc.exe 1496 vlc.exe 1496 vlc.exe 1496 vlc.exe - Suspicious use of SendNotifyMessage 5 IoCs
pid Process 1496 vlc.exe 1496 vlc.exe 1496 vlc.exe 1496 vlc.exe 1496 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1496 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\kxgaRaHo.ts"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1496