Analysis
- max time kernel
148s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
10/09/2026, 10:00
General
- Target $TEMP/bgm.xm
- Size 53KB
- Sample260910-l16lysvsg1
- SHA256 498eadc5b3d65aaf34b8496954c3362f033297c489d7ef4559cba8890c530171
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\$TEMP\bgm.xm"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3680-0-0x00007FFA4C2DD000-0x00007FFA4C2DF000-memory.dmp
memory/3680-1-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-2-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-3-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-4-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-5-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-6-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-7-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-8-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-9-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-10-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-13-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-14-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-12-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-11-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-15-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-16-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-17-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-22-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp
memory/3680-23-0x00007FF675600000-0x00007FF6756F8000-memory.dmp
memory/3680-24-0x00007FFA62030000-0x00007FFA62064000-memory.dmp
memory/3680-26-0x00007FFA62800000-0x00007FFA62811000-memory.dmp
memory/3680-27-0x00007FFA62790000-0x00007FFA627A9000-memory.dmp
memory/3680-29-0x00007FFA5DA20000-0x00007FFA5DA4B000-memory.dmp
memory/3680-28-0x00007FFA5ED10000-0x00007FFA5ED32000-memory.dmp
memory/3680-32-0x00007FFA58400000-0x00007FFA58411000-memory.dmp
memory/3680-31-0x00007FFA5DFA0000-0x00007FFA5DFB4000-memory.dmp
memory/3680-35-0x00007FFA52B40000-0x00007FFA52C28000-memory.dmp
memory/3680-44-0x00007FFA56230000-0x00007FFA56241000-memory.dmp
memory/3680-43-0x00007FFA56250000-0x00007FFA56261000-memory.dmp
memory/3680-42-0x00007FFA56270000-0x00007FFA5628A000-memory.dmp
memory/3680-41-0x00007FFA56290000-0x00007FFA562BD000-memory.dmp
memory/3680-40-0x00007FFA56C20000-0x00007FFA56C46000-memory.dmp
memory/3680-39-0x00007FFA56C50000-0x00007FFA56C68000-memory.dmp
memory/3680-46-0x00007FFA52CE0000-0x00007FFA52D78000-memory.dmp
memory/3680-51-0x000001E534990000-0x000001E534AA1000-memory.dmp
memory/3680-52-0x00007FFA45240000-0x00007FFA45485000-memory.dmp
memory/3680-45-0x00007FFA4AB50000-0x00007FFA4AD5B000-memory.dmp
memory/3680-50-0x00007FFA56210000-0x00007FFA5622B000-memory.dmp
memory/3680-49-0x00007FFA52A90000-0x00007FFA52B3B000-memory.dmp
memory/3680-48-0x00007FFA54080000-0x00007FFA540A5000-memory.dmp
memory/3680-47-0x00007FFA55C20000-0x00007FFA55C6F000-memory.dmp
memory/3680-38-0x00007FFA56C70000-0x00007FFA56C9F000-memory.dmp
memory/3680-37-0x00007FFA56CA0000-0x00007FFA56CE1000-memory.dmp
memory/3680-36-0x00007FFA52110000-0x00007FFA521F3000-memory.dmp
memory/3680-34-0x00007FFA4AD60000-0x00007FFA4AFF6000-memory.dmp
memory/3680-33-0x00007FFA562C0000-0x00007FFA56392000-memory.dmp
memory/3680-30-0x00007FFA4B000000-0x00007FFA4B390000-memory.dmp
memory/3680-325-0x00007FFA4C030000-0x00007FFA4C2E6000-memory.dmp