Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/09/2026, 10:00
General
- Target $TEMP/bgm.xm
- Size 53KB
- Sample260910-l16lysvsg1
- SHA256 498eadc5b3d65aaf34b8496954c3362f033297c489d7ef4559cba8890c530171
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\$TEMP\bgm.xm"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4940-5-0x00007FFB67F20000-0x00007FFB67F54000-memory.dmp
memory/4940-4-0x00007FF64DE10000-0x00007FF64DF08000-memory.dmp
memory/4940-8-0x00007FFB6C870000-0x00007FFB6C889000-memory.dmp
memory/4940-9-0x00007FFB67AA0000-0x00007FFB67AC2000-memory.dmp
memory/4940-10-0x00007FFB67A70000-0x00007FFB67A9B000-memory.dmp
memory/4940-6-0x00007FFB67490000-0x00007FFB67746000-memory.dmp
memory/4940-12-0x00007FFB678C0000-0x00007FFB678D4000-memory.dmp
memory/4940-14-0x00007FFB673B0000-0x00007FFB67482000-memory.dmp
memory/4940-13-0x00007FFB678A0000-0x00007FFB678B1000-memory.dmp
memory/4940-16-0x00007FFB5A470000-0x00007FFB5A558000-memory.dmp
memory/4940-15-0x00007FFB5A560000-0x00007FFB5A7F6000-memory.dmp
memory/4940-11-0x00007FFB5A800000-0x00007FFB5AB90000-memory.dmp
memory/4940-7-0x00007FFB6CB30000-0x00007FFB6CB41000-memory.dmp
memory/4940-17-0x00007FFB5A380000-0x00007FFB5A463000-memory.dmp
memory/4940-25-0x00007FFB67030000-0x00007FFB67041000-memory.dmp
memory/4940-29-0x00007FFB5B280000-0x00007FFB5B2A5000-memory.dmp
memory/4940-32-0x00007FFB5AEF0000-0x00007FFB5AF02000-memory.dmp
memory/4940-31-0x00007FFB66E50000-0x00007FFB66E6B000-memory.dmp
memory/4940-33-0x0000021E5EDA0000-0x0000021E5F25A000-memory.dmp
memory/4940-34-0x00007FFB54120000-0x00007FFB54365000-memory.dmp
memory/4940-35-0x0000021E5F660000-0x0000021E5F87A000-memory.dmp
memory/4940-30-0x00007FFB59FD0000-0x00007FFB5A07B000-memory.dmp
memory/4940-28-0x00007FFB5A080000-0x00007FFB5A0CF000-memory.dmp
memory/4940-27-0x00007FFB5A0D0000-0x00007FFB5A168000-memory.dmp
memory/4940-26-0x00007FFB5A170000-0x00007FFB5A37B000-memory.dmp
memory/4940-24-0x00007FFB672E0000-0x00007FFB672F1000-memory.dmp
memory/4940-23-0x00007FFB67300000-0x00007FFB6731A000-memory.dmp
memory/4940-22-0x00007FFB67320000-0x00007FFB6734D000-memory.dmp
memory/4940-21-0x00007FFB67350000-0x00007FFB67376000-memory.dmp
memory/4940-20-0x00007FFB67830000-0x00007FFB67848000-memory.dmp
memory/4940-19-0x00007FFB67380000-0x00007FFB673AF000-memory.dmp
memory/4940-18-0x00007FFB67850000-0x00007FFB67891000-memory.dmp
memory/4940-38-0x00007FFB67490000-0x00007FFB67746000-memory.dmp
memory/4940-70-0x00007FFB67490000-0x00007FFB67746000-memory.dmp
memory/4940-326-0x00007FFB67490000-0x00007FFB67746000-memory.dmp