Analysis
- max time kernel
152s - max time network
186s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 21:09
General
- Target th06nc/data/bgm/th06_08.opus
- Size 2.7MB
- Sample260910-zzghbsweld
- SHA256 e766e172d1dbcbfbd51b2abf52b6b4fb0160aad37ad95f4832129c408488bd01
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\th06nc\data\bgm\th06_08.opus"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3744-0-0x00007FFBB0E3D000-0x00007FFBB0E3F000-memory.dmp
memory/3744-1-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-2-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-3-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-5-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-6-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-7-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-4-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-8-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-9-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-10-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-12-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-14-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-13-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-11-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-15-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-16-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-21-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-22-0x00007FFBB0B90000-0x00007FFBB0E46000-memory.dmp
memory/3744-23-0x00007FF7D6750000-0x00007FF7D6848000-memory.dmp
memory/3744-24-0x00007FFBC3970000-0x00007FFBC39A4000-memory.dmp
memory/3744-29-0x00007FFBC3940000-0x00007FFBC396B000-memory.dmp
memory/3744-28-0x00007FFBC5200000-0x00007FFBC5222000-memory.dmp
memory/3744-27-0x00007FFBC67C0000-0x00007FFBC67D9000-memory.dmp
memory/3744-26-0x00007FFBC87F0000-0x00007FFBC8801000-memory.dmp
memory/3744-30-0x00007FFBB0800000-0x00007FFBB0B90000-memory.dmp
memory/3744-32-0x00007FFBC0A30000-0x00007FFBC0A41000-memory.dmp
memory/3744-33-0x00007FFBB29C0000-0x00007FFBB2A92000-memory.dmp
memory/3744-31-0x00007FFBC0A50000-0x00007FFBC0A64000-memory.dmp
memory/3744-44-0x00007FFBBD0F0000-0x00007FFBBD101000-memory.dmp
memory/3744-35-0x00007FFBB1490000-0x00007FFBB1578000-memory.dmp
memory/3744-50-0x00007FFBBB8E0000-0x00007FFBBB8FB000-memory.dmp
memory/3744-49-0x00007FFBB2910000-0x00007FFBB29BB000-memory.dmp
memory/3744-45-0x00007FFBB0260000-0x00007FFBB046B000-memory.dmp
memory/3744-43-0x00007FFBBDAA0000-0x00007FFBBDAB1000-memory.dmp
memory/3744-42-0x00007FFBBF2B0000-0x00007FFBBF2CA000-memory.dmp
memory/3744-41-0x00007FFBB9DF0000-0x00007FFBB9E1D000-memory.dmp
memory/3744-51-0x0000013028300000-0x00000130285DB000-memory.dmp
memory/3744-48-0x00007FFBB7570000-0x00007FFBB7595000-memory.dmp
memory/3744-46-0x00007FFBB96D0000-0x00007FFBB9768000-memory.dmp
memory/3744-36-0x00007FFBB0470000-0x00007FFBB0553000-memory.dmp
memory/3744-40-0x00007FFBB9E20000-0x00007FFBB9E46000-memory.dmp
memory/3744-47-0x00007FFBB9DA0000-0x00007FFBB9DEF000-memory.dmp
memory/3744-39-0x00007FFBC0A10000-0x00007FFBC0A28000-memory.dmp
memory/3744-53-0x00007FFBA8350000-0x00007FFBA8595000-memory.dmp
memory/3744-52-0x00000130286E0000-0x0000013029F4F000-memory.dmp
memory/3744-38-0x00007FFBC02A0000-0x00007FFBC02CF000-memory.dmp
memory/3744-37-0x00007FFBC0980000-0x00007FFBC09C1000-memory.dmp
memory/3744-34-0x00007FFBB0560000-0x00007FFBB07F6000-memory.dmp