Analysis
- max time kernel
151s - max time network
189s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 21:09
General
- Target th06nc/data/bgm/th06_06.opus
- Size 3.6MB
- Sample260910-zzghbsweld
- SHA256 cf7880179a46a8cfb96c07e54dd0871d48c3cddd5c1fdd3bfc26f8b590b9a052
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\th06nc\data\bgm\th06_06.opus"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3836-0-0x00007FFCFE3ED000-0x00007FFCFE3EF000-memory.dmp
memory/3836-1-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-2-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-3-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-4-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-6-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-5-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-7-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-8-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-10-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-12-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-11-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-9-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-13-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-14-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-15-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-17-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-16-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-18-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-19-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-20-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-23-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-26-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-27-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-28-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-25-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-24-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-22-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-21-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-33-0x00007FFCFE140000-0x00007FFCFE3F6000-memory.dmp
memory/3836-35-0x00007FFD045C0000-0x00007FFD045F4000-memory.dmp
memory/3836-34-0x00007FF69BAD0000-0x00007FF69BBC8000-memory.dmp
memory/3836-38-0x00007FFD04560000-0x00007FFD04579000-memory.dmp
memory/3836-40-0x00007FFD04500000-0x00007FFD0452B000-memory.dmp
memory/3836-39-0x00007FFD04530000-0x00007FFD04552000-memory.dmp
memory/3836-37-0x00007FFD04910000-0x00007FFD04921000-memory.dmp
memory/3836-43-0x00007FFD044C0000-0x00007FFD044D1000-memory.dmp
memory/3836-41-0x00007FFCEBDC0000-0x00007FFCEC150000-memory.dmp
memory/3836-44-0x00007FFCF72F0000-0x00007FFCF73C2000-memory.dmp
memory/3836-45-0x00007FFCEBB20000-0x00007FFCEBDB6000-memory.dmp
memory/3836-48-0x00007FFCFFCF0000-0x00007FFCFFD31000-memory.dmp
memory/3836-47-0x00007FFCF0B30000-0x00007FFCF0C13000-memory.dmp
memory/3836-50-0x00007FFCFFCD0000-0x00007FFCFFCE8000-memory.dmp
memory/3836-49-0x00007FFD032A0000-0x00007FFD032CF000-memory.dmp
memory/3836-46-0x00007FFCF7200000-0x00007FFCF72E8000-memory.dmp
memory/3836-42-0x00007FFD044E0000-0x00007FFD044F4000-memory.dmp
memory/3836-55-0x00007FFCFDED0000-0x00007FFCFDEE1000-memory.dmp
memory/3836-56-0x00007FFCECC70000-0x00007FFCECE7B000-memory.dmp
memory/3836-61-0x00007FFCFD760000-0x00007FFCFD77B000-memory.dmp
memory/3836-62-0x0000021D38240000-0x0000021D383BA000-memory.dmp
memory/3836-63-0x00007FFCE5D00000-0x00007FFCE5F45000-memory.dmp
memory/3836-60-0x00007FFCF0A80000-0x00007FFCF0B2B000-memory.dmp
memory/3836-58-0x00007FFCF71B0000-0x00007FFCF71FF000-memory.dmp
memory/3836-57-0x00007FFCFDE30000-0x00007FFCFDEC8000-memory.dmp
memory/3836-59-0x00007FFCF5500000-0x00007FFCF5525000-memory.dmp
memory/3836-54-0x00007FFCFFAE0000-0x00007FFCFFAF1000-memory.dmp
memory/3836-53-0x00007FFCFFC80000-0x00007FFCFFC9A000-memory.dmp
memory/3836-52-0x00007FFCFF000000-0x00007FFCFF02D000-memory.dmp
memory/3836-51-0x00007FFCFFCA0000-0x00007FFCFFCC6000-memory.dmp