Analysis
- max time kernel
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 21:09
General
- Target th06nc/data/bgm/th06_10.opus
- Size 4.1MB
- Sample260910-zzghbsweld
- SHA256 22617c1b897b784f0278da4d96103b2e220118a0d16354b107bb95fcd649619f
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\th06nc\data\bgm\th06_10.opus"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3724-0-0x00007FF809F2D000-0x00007FF809F2F000-memory.dmp
memory/3724-1-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-2-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-3-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-4-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-7-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-8-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-10-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-9-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-6-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-5-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-11-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-12-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-13-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-14-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-19-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-20-0x00007FF809C80000-0x00007FF809F36000-memory.dmp
memory/3724-21-0x00007FF620EF0000-0x00007FF620FE8000-memory.dmp
memory/3724-25-0x00007FF81E3F0000-0x00007FF81E409000-memory.dmp
memory/3724-27-0x00007FF8145C0000-0x00007FF8145EB000-memory.dmp
memory/3724-26-0x00007FF8145F0000-0x00007FF814612000-memory.dmp
memory/3724-24-0x00007FF822030000-0x00007FF822041000-memory.dmp
memory/3724-22-0x00007FF81E2E0000-0x00007FF81E314000-memory.dmp
memory/3724-32-0x00007FF809650000-0x00007FF8098E6000-memory.dmp
memory/3724-37-0x00007FF814BA0000-0x00007FF814BB8000-memory.dmp
memory/3724-42-0x00007FF8108B0000-0x00007FF8108C1000-memory.dmp
memory/3724-44-0x00007FF80CB00000-0x00007FF80CB98000-memory.dmp
memory/3724-47-0x00007FF80C640000-0x00007FF80C6EB000-memory.dmp
memory/3724-53-0x00007FF803230000-0x00007FF803475000-memory.dmp
memory/3724-46-0x00007FF80E120000-0x00007FF80E145000-memory.dmp
memory/3724-52-0x00000264BB630000-0x00000264BB641000-memory.dmp
memory/3724-43-0x00007FF809440000-0x00007FF80964B000-memory.dmp
memory/3724-51-0x00000264BB610000-0x00000264BB622000-memory.dmp
memory/3724-50-0x00000264BB5F0000-0x00000264BB601000-memory.dmp
memory/3724-49-0x00000264BB5D0000-0x00000264BB5EB000-memory.dmp
memory/3724-48-0x00007FF8100E0000-0x00007FF8100FB000-memory.dmp
memory/3724-45-0x00007FF80C6F0000-0x00007FF80C73F000-memory.dmp
memory/3724-41-0x00007FF810940000-0x00007FF810951000-memory.dmp
memory/3724-40-0x00007FF812480000-0x00007FF81249A000-memory.dmp
memory/3724-39-0x00007FF810960000-0x00007FF81098D000-memory.dmp
memory/3724-38-0x00007FF810990000-0x00007FF8109B6000-memory.dmp
memory/3724-34-0x00007FF80CBA0000-0x00007FF80CC83000-memory.dmp
memory/3724-36-0x00007FF8109C0000-0x00007FF8109EF000-memory.dmp
memory/3724-35-0x00007FF813E80000-0x00007FF813EC1000-memory.dmp
memory/3724-33-0x00007FF8109F0000-0x00007FF810AD8000-memory.dmp
memory/3724-31-0x00007FF8144E0000-0x00007FF8145B2000-memory.dmp
memory/3724-28-0x00007FF8098F0000-0x00007FF809C80000-memory.dmp
memory/3724-30-0x00007FF816750000-0x00007FF816761000-memory.dmp
memory/3724-29-0x00007FF81BCE0000-0x00007FF81BCF4000-memory.dmp