Analysis
- max time kernel
149s - max time network
139s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/09/2026, 12:45
Static task
static1
Behavioral task
behavioral1
Sample
AAAAAAAAAAAAAAAAAAAA.mp3
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
AAAAAAAAAAAAAAAAAAAA.mp3
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
General
- Target AAAAAAAAAAAAAAAAAAAA.mp3
- Size 29KB
- Sample260908-py6eysbp2x
- SHA256 2ded679d85f39775a5130ae6db2a520e4595a8960bf6d3110e449d2336374b78
- MD5 1224d80050780a02babb0add8d3b9c5e
- SHA1 d023e7382dbe6a6845ef13f38ada705ab9a49dc1
- SHA512 aa1f8d0db2640efe9b8438f9a4efae4b7f447bedabb698a25cb7351c0ed9fa6a5f8b8fcfad49997343e9bf5b4604d9be1f67872cb28c2a3cc5e0ae1bac3b04c2
- SSDEEP 768:LjwF8x5cYVR2+dAk/uC9+pokftRO9SgdKevHb3:O8x5lVRHdAkWC9+G8ESgdZfj
- TLSH T13DD2E119E50F0531E7AAF8B4D6B3EC20227A954D27AF15C9EBD1691CB00E27B7D602F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2964 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2964 vlc.exe - Suspicious use of FindShellTrayWindow 8 IoCs
pid Process 2964 vlc.exe 2964 vlc.exe 2964 vlc.exe 2964 vlc.exe 2964 vlc.exe 2964 vlc.exe 2964 vlc.exe 2964 vlc.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 2964 vlc.exe 2964 vlc.exe 2964 vlc.exe 2964 vlc.exe 2964 vlc.exe 2964 vlc.exe 2964 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2964 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\AAAAAAAAAAAAAAAAAAAA.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2964