Analysis
- max time kernel
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
08/09/2026, 00:46
General
- Target DELTARUNE/mus/the_dark_truth.ogg
- Size 469KB
- Sample260908-a4nd1ayerd
- SHA256 a901ca49c42b83417fb25b7240425d75827eb555b974fc1141b0d4a6e52170c4
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\DELTARUNE\mus\the_dark_truth.ogg"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/6760-0-0x00007FFA60F7D000-0x00007FFA60F7F000-memory.dmp
memory/6760-1-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-2-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-3-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-4-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-6-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-7-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-5-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-9-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-8-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-11-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-10-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-12-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-13-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-14-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-19-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-20-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-21-0x00007FF701640000-0x00007FF701738000-memory.dmp
memory/6760-24-0x00007FFA79DF0000-0x00007FFA79E01000-memory.dmp
memory/6760-27-0x00007FFA79D70000-0x00007FFA79D9B000-memory.dmp
memory/6760-26-0x00007FFA79DA0000-0x00007FFA79DC2000-memory.dmp
memory/6760-22-0x00007FFA7A500000-0x00007FFA7A534000-memory.dmp
memory/6760-25-0x00007FFA79DD0000-0x00007FFA79DE9000-memory.dmp
memory/6760-28-0x00007FFA5FB50000-0x00007FFA5FEE0000-memory.dmp
memory/6760-29-0x00007FFA79D50000-0x00007FFA79D64000-memory.dmp
memory/6760-30-0x00007FFA79D30000-0x00007FFA79D41000-memory.dmp
memory/6760-31-0x00007FFA76A70000-0x00007FFA76B42000-memory.dmp
memory/6760-35-0x00007FFA76A20000-0x00007FFA76A61000-memory.dmp
memory/6760-38-0x00007FFA769F0000-0x00007FFA76A16000-memory.dmp
memory/6760-42-0x00007FFA72C30000-0x00007FFA72C41000-memory.dmp
memory/6760-41-0x00007FFA72C50000-0x00007FFA72C61000-memory.dmp
memory/6760-47-0x00007FFA66180000-0x00007FFA6622B000-memory.dmp
memory/6760-44-0x00007FFA6AF70000-0x00007FFA6B008000-memory.dmp
memory/6760-34-0x00007FFA66560000-0x00007FFA66643000-memory.dmp
memory/6760-51-0x0000026126F10000-0x0000026126F22000-memory.dmp
memory/6760-53-0x00007FFA580E0000-0x00007FFA58325000-memory.dmp
memory/6760-52-0x0000026128E30000-0x0000026128FAA000-memory.dmp
memory/6760-50-0x0000026126EF0000-0x0000026126F03000-memory.dmp
memory/6760-49-0x0000026126ED0000-0x0000026126EE1000-memory.dmp
memory/6760-48-0x00007FFA728B0000-0x00007FFA728CB000-memory.dmp
memory/6760-46-0x00007FFA6B680000-0x00007FFA6B6A5000-memory.dmp
memory/6760-45-0x00007FFA69B80000-0x00007FFA69BCF000-memory.dmp
memory/6760-43-0x00007FFA5F6A0000-0x00007FFA5F8AB000-memory.dmp
memory/6760-40-0x00007FFA72C90000-0x00007FFA72CAA000-memory.dmp
memory/6760-39-0x00007FFA769C0000-0x00007FFA769ED000-memory.dmp
memory/6760-37-0x00007FFA78400000-0x00007FFA78418000-memory.dmp
memory/6760-36-0x00007FFA79D00000-0x00007FFA79D2F000-memory.dmp
memory/6760-32-0x00007FFA5F8B0000-0x00007FFA5FB46000-memory.dmp
memory/6760-33-0x00007FFA66650000-0x00007FFA66738000-memory.dmp
memory/6760-56-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-122-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-188-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp
memory/6760-221-0x00007FFA60CD0000-0x00007FFA60F86000-memory.dmp