Analysis
- max time kernel
152s - max time network
188s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 21:09
General
- Target th06nc/data/bgm/th06_07.opus
- Size 2.4MB
- Sample260910-zzghbsweld
- SHA256 b4b6cdb2545dd5581f6429583dced8eca327d7eae796951508e710226c0c986a
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\th06nc\data\bgm\th06_07.opus"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5484-0-0x00007FFD6FD0D000-0x00007FFD6FD0F000-memory.dmp
memory/5484-1-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-2-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-3-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-4-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-5-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-7-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-6-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-8-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-11-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-9-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-10-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-12-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-13-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-14-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-15-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-20-0x00007FFD6FA60000-0x00007FFD6FD16000-memory.dmp
memory/5484-21-0x00007FF7EC500000-0x00007FF7EC5F8000-memory.dmp
memory/5484-25-0x00007FFD7F170000-0x00007FFD7F189000-memory.dmp
memory/5484-27-0x00007FFD7F110000-0x00007FFD7F13B000-memory.dmp
memory/5484-24-0x00007FFD83990000-0x00007FFD839A1000-memory.dmp
memory/5484-26-0x00007FFD7F140000-0x00007FFD7F162000-memory.dmp
memory/5484-22-0x00007FFD822F0000-0x00007FFD82324000-memory.dmp
memory/5484-29-0x00007FFD7F0F0000-0x00007FFD7F104000-memory.dmp
memory/5484-30-0x00007FFD7D950000-0x00007FFD7D961000-memory.dmp
memory/5484-31-0x00007FFD761A0000-0x00007FFD76272000-memory.dmp
memory/5484-35-0x00007FFD7D900000-0x00007FFD7D941000-memory.dmp
memory/5484-42-0x00007FFD772A0000-0x00007FFD772B1000-memory.dmp
memory/5484-32-0x00007FFD6B530000-0x00007FFD6B7C6000-memory.dmp
memory/5484-41-0x00007FFD7C160000-0x00007FFD7C171000-memory.dmp
memory/5484-47-0x00007FFD72C00000-0x00007FFD72CAB000-memory.dmp
memory/5484-49-0x0000017C65E50000-0x0000017C66056000-memory.dmp
memory/5484-50-0x00007FFD64C10000-0x00007FFD64E55000-memory.dmp
memory/5484-46-0x00007FFD77230000-0x00007FFD77255000-memory.dmp
memory/5484-45-0x00007FFD74050000-0x00007FFD7409F000-memory.dmp
memory/5484-44-0x00007FFD742C0000-0x00007FFD74358000-memory.dmp
memory/5484-43-0x00007FFD6B320000-0x00007FFD6B52B000-memory.dmp
memory/5484-48-0x00007FFD77280000-0x00007FFD7729B000-memory.dmp
memory/5484-40-0x00007FFD7CCF0000-0x00007FFD7CD0A000-memory.dmp
memory/5484-39-0x00007FFD772C0000-0x00007FFD772ED000-memory.dmp
memory/5484-38-0x00007FFD7CB40000-0x00007FFD7CB66000-memory.dmp
memory/5484-37-0x00007FFD7D8B0000-0x00007FFD7D8C8000-memory.dmp
memory/5484-36-0x00007FFD7D8D0000-0x00007FFD7D8FF000-memory.dmp
memory/5484-34-0x00007FFD72020000-0x00007FFD72103000-memory.dmp
memory/5484-33-0x00007FFD72CB0000-0x00007FFD72D98000-memory.dmp
memory/5484-28-0x00007FFD6B7D0000-0x00007FFD6BB60000-memory.dmp