Analysis
- max time kernel
153s - max time network
188s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 21:09
General
- Target th06nc/data/bgm/th06_04.opus
- Size 2.3MB
- Sample260910-zzghbsweld
- SHA256 4a9f0d22b12697469dae8a296a950fc7ec06767f2ac09a0683f77b4aa566a084
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\th06nc\data\bgm\th06_04.opus"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5556-0-0x00007FFBDF40D000-0x00007FFBDF40F000-memory.dmp
memory/5556-1-0x00007FFBDF160000-0x00007FFBDF416000-memory.dmp
memory/5556-2-0x00007FFBDF160000-0x00007FFBDF416000-memory.dmp
memory/5556-3-0x00007FFBDF160000-0x00007FFBDF416000-memory.dmp
memory/5556-4-0x00007FFBDF160000-0x00007FFBDF416000-memory.dmp
memory/5556-5-0x00007FFBDF160000-0x00007FFBDF416000-memory.dmp
memory/5556-7-0x00007FFBDF160000-0x00007FFBDF416000-memory.dmp
memory/5556-6-0x00007FFBDF160000-0x00007FFBDF416000-memory.dmp
memory/5556-8-0x00007FFBDF160000-0x00007FFBDF416000-memory.dmp
memory/5556-9-0x00007FFBDF160000-0x00007FFBDF416000-memory.dmp
memory/5556-10-0x00007FFBDF160000-0x00007FFBDF416000-memory.dmp
memory/5556-11-0x00007FFBDF160000-0x00007FFBDF416000-memory.dmp
memory/5556-12-0x00007FFBDF160000-0x00007FFBDF416000-memory.dmp
memory/5556-17-0x00007FFBDF160000-0x00007FFBDF416000-memory.dmp
memory/5556-18-0x00007FF6B2410000-0x00007FF6B2508000-memory.dmp
memory/5556-19-0x00007FFBF4060000-0x00007FFBF4094000-memory.dmp
memory/5556-23-0x00007FFBF2760000-0x00007FFBF2782000-memory.dmp
memory/5556-24-0x00007FFBF2730000-0x00007FFBF275B000-memory.dmp
memory/5556-22-0x00007FFBF4280000-0x00007FFBF4299000-memory.dmp
memory/5556-25-0x00007FFBDDA60000-0x00007FFBDDDF0000-memory.dmp
memory/5556-28-0x00007FFBE86B0000-0x00007FFBE8782000-memory.dmp
memory/5556-29-0x00007FFBDD7C0000-0x00007FFBDDA56000-memory.dmp
memory/5556-27-0x00007FFBF2710000-0x00007FFBF2721000-memory.dmp
memory/5556-26-0x00007FFBF3FE0000-0x00007FFBF3FF4000-memory.dmp
memory/5556-21-0x00007FFBF5FB0000-0x00007FFBF5FC1000-memory.dmp
memory/5556-30-0x00007FFBE20F0000-0x00007FFBE21D8000-memory.dmp
memory/5556-39-0x00007FFBEECB0000-0x00007FFBEECC1000-memory.dmp
memory/5556-37-0x00007FFBEF130000-0x00007FFBEF14A000-memory.dmp
memory/5556-43-0x00007FFBE9350000-0x00007FFBE9375000-memory.dmp
memory/5556-44-0x00007FFBE0AE0000-0x00007FFBE0B8B000-memory.dmp
memory/5556-50-0x00007FFBD7250000-0x00007FFBD7495000-memory.dmp
memory/5556-38-0x00007FFBEECD0000-0x00007FFBEECE1000-memory.dmp
memory/5556-41-0x00007FFBE9380000-0x00007FFBE9418000-memory.dmp
memory/5556-49-0x0000025AD9280000-0x0000025AD9291000-memory.dmp
memory/5556-48-0x0000025AD8C00000-0x0000025AD8C12000-memory.dmp
memory/5556-47-0x0000025AD8BE0000-0x0000025AD8BF1000-memory.dmp
memory/5556-46-0x0000025AD7410000-0x0000025AD7421000-memory.dmp
memory/5556-45-0x00007FFBEBA40000-0x00007FFBEBA5B000-memory.dmp
memory/5556-42-0x00007FFBE20A0000-0x00007FFBE20EF000-memory.dmp
memory/5556-40-0x00007FFBDD5B0000-0x00007FFBDD7BB000-memory.dmp
memory/5556-36-0x00007FFBEECF0000-0x00007FFBEED1D000-memory.dmp
memory/5556-35-0x00007FFBF0300000-0x00007FFBF0326000-memory.dmp
memory/5556-34-0x00007FFBF03C0000-0x00007FFBF03D8000-memory.dmp
memory/5556-31-0x00007FFBE0B90000-0x00007FFBE0C73000-memory.dmp
memory/5556-33-0x00007FFBF26E0000-0x00007FFBF270F000-memory.dmp
memory/5556-32-0x00007FFBEF150000-0x00007FFBEF191000-memory.dmp