Analysis
- max time kernel
154s - max time network
200s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 21:09
General
- Target th06nc/data/bgm/th06_09.opus
- Size 2.9MB
- Sample260910-zzghbsweld
- SHA256 2aa3d21e28671be8e78584a2d94f10fe65e91f17c506ddbd7e6dd846c4b64242
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\th06nc\data\bgm\th06_09.opus"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3176-0-0x00007FF8BAFCD000-0x00007FF8BAFCF000-memory.dmp
memory/3176-1-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-2-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-3-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-4-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-5-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-6-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-7-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-9-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-8-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-10-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-11-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-12-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-14-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-13-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-19-0x00007FF70EA70000-0x00007FF70EB68000-memory.dmp
memory/3176-23-0x00007FF8CF7D0000-0x00007FF8CF7E9000-memory.dmp
memory/3176-21-0x00007FF8BAD20000-0x00007FF8BAFD6000-memory.dmp
memory/3176-25-0x00007FF8CB5A0000-0x00007FF8CB5CB000-memory.dmp
memory/3176-24-0x00007FF8CC740000-0x00007FF8CC762000-memory.dmp
memory/3176-22-0x00007FF8D1450000-0x00007FF8D1461000-memory.dmp
memory/3176-28-0x00007FF8CB150000-0x00007FF8CB161000-memory.dmp
memory/3176-26-0x00007FF8B8A40000-0x00007FF8B8DD0000-memory.dmp
memory/3176-30-0x00007FF8B87A0000-0x00007FF8B8A36000-memory.dmp
memory/3176-37-0x00007FF8C3A70000-0x00007FF8C3A9D000-memory.dmp
memory/3176-32-0x00007FF8BC730000-0x00007FF8BC813000-memory.dmp
memory/3176-44-0x00007FF8C3A40000-0x00007FF8C3A65000-memory.dmp
memory/3176-43-0x00007FF8BC640000-0x00007FF8BC68F000-memory.dmp
memory/3176-49-0x00007FF8B2A10000-0x00007FF8B2C55000-memory.dmp
memory/3176-48-0x0000025B62550000-0x0000025B62661000-memory.dmp
memory/3176-45-0x00007FF8BBED0000-0x00007FF8BBF7B000-memory.dmp
memory/3176-34-0x00007FF8CA5D0000-0x00007FF8CA5FF000-memory.dmp
memory/3176-42-0x00007FF8BC690000-0x00007FF8BC728000-memory.dmp
memory/3176-47-0x0000025B60630000-0x0000025B60643000-memory.dmp
memory/3176-46-0x00007FF8C1350000-0x00007FF8C136B000-memory.dmp
memory/3176-41-0x00007FF8B8590000-0x00007FF8B879B000-memory.dmp
memory/3176-40-0x00007FF8C4590000-0x00007FF8C45A1000-memory.dmp
memory/3176-39-0x00007FF8C5C20000-0x00007FF8C5C31000-memory.dmp
memory/3176-38-0x00007FF8C9EA0000-0x00007FF8C9EBA000-memory.dmp
memory/3176-36-0x00007FF8C45B0000-0x00007FF8C45D6000-memory.dmp
memory/3176-35-0x00007FF8CB050000-0x00007FF8CB068000-memory.dmp
memory/3176-31-0x00007FF8C08E0000-0x00007FF8C09C8000-memory.dmp
memory/3176-33-0x00007FF8CA600000-0x00007FF8CA641000-memory.dmp
memory/3176-29-0x00007FF8CB070000-0x00007FF8CB142000-memory.dmp
memory/3176-27-0x00007FF8CB170000-0x00007FF8CB184000-memory.dmp
memory/3176-20-0x00007FF8CB210000-0x00007FF8CB244000-memory.dmp