Analysis
- max time kernel
151s - max time network
189s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
10/09/2026, 21:09
General
- Target th06nc/data/bgm/th06_12.opus
- Size 1.5MB
- Sample260910-zzghbsweld
- SHA256 64009d1cf6bee74c092ab78dd91d97c9130166647b2b84d5f885a5bfaf1387bb
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\th06nc\data\bgm\th06_12.opus"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5692-0-0x00007FFDD59DD000-0x00007FFDD59DF000-memory.dmp
memory/5692-2-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-4-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-3-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-1-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-6-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-8-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-7-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-10-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-9-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-5-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-11-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-13-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-15-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-14-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-17-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-16-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-18-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-19-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-20-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-22-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-23-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-25-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-24-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-21-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-12-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-26-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-27-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-28-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-29-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-30-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-31-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-32-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-33-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-34-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-36-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-37-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-38-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-39-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-40-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-35-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-41-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-46-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-47-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-48-0x00007FF705800000-0x00007FF7058F8000-memory.dmp
memory/5692-49-0x00007FFDE9990000-0x00007FFDE99C4000-memory.dmp
memory/5692-52-0x00007FFDEC950000-0x00007FFDEC969000-memory.dmp
memory/5692-54-0x00007FFDE88D0000-0x00007FFDE88FB000-memory.dmp
memory/5692-53-0x00007FFDE8E90000-0x00007FFDE8EB2000-memory.dmp
memory/5692-51-0x00007FFDEE200000-0x00007FFDEE211000-memory.dmp
memory/5692-50-0x00007FFDD5730000-0x00007FFDD59E6000-memory.dmp
memory/5692-58-0x00007FFDE87F0000-0x00007FFDE88C2000-memory.dmp
memory/5692-59-0x00007FFDD4EB0000-0x00007FFDD5146000-memory.dmp
memory/5692-63-0x00007FFDE87C0000-0x00007FFDE87EF000-memory.dmp
memory/5692-61-0x00007FFDDC4E0000-0x00007FFDDC5C3000-memory.dmp
memory/5692-73-0x00007FFDE0BF0000-0x00007FFDE0C15000-memory.dmp
memory/5692-74-0x00007FFDD93D0000-0x00007FFDD947B000-memory.dmp
memory/5692-76-0x00007FFDCF540000-0x00007FFDCF785000-memory.dmp
memory/5692-75-0x00007FFDDEFC0000-0x00007FFDDEFDB000-memory.dmp
memory/5692-72-0x00007FFDE0C20000-0x00007FFDE0C6F000-memory.dmp
memory/5692-71-0x00007FFDDC440000-0x00007FFDDC4D8000-memory.dmp
memory/5692-70-0x0000013C80740000-0x0000013C8094B000-memory.dmp
memory/5692-60-0x00007FFDE0C70000-0x00007FFDE0D58000-memory.dmp
memory/5692-69-0x00007FFDE15F0000-0x00007FFDE1601000-memory.dmp
memory/5692-68-0x00007FFDE1610000-0x00007FFDE1621000-memory.dmp
memory/5692-67-0x00007FFDE1630000-0x00007FFDE164A000-memory.dmp
memory/5692-66-0x00007FFDE1650000-0x00007FFDE167D000-memory.dmp
memory/5692-65-0x00007FFDE1680000-0x00007FFDE16A6000-memory.dmp
memory/5692-64-0x00007FFDE8C60000-0x00007FFDE8C78000-memory.dmp
memory/5692-62-0x00007FFDE7EB0000-0x00007FFDE7EF1000-memory.dmp
memory/5692-55-0x00007FFDD5150000-0x00007FFDD54E0000-memory.dmp
memory/5692-57-0x00007FFDE9930000-0x00007FFDE9941000-memory.dmp
memory/5692-56-0x00007FFDEC8F0000-0x00007FFDEC904000-memory.dmp