Analysis
- max time kernel
153s - max time network
191s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 21:09
General
- Target th06nc/data/bgm/th06_13.opus
- Size 4.1MB
- Sample260910-zzghbsweld
- SHA256 13143aecae90f5c22b9105f818f5b7aa6108727b40f0de226380d111be426d4c
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\th06nc\data\bgm\th06_13.opus"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/236-0-0x00007FFF2F8CD000-0x00007FFF2F8CF000-memory.dmp
memory/236-1-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-2-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-4-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-3-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-6-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-5-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-7-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-8-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-9-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-10-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-11-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-12-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-13-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-14-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-16-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-15-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-17-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-18-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-19-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-20-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-21-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-22-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-23-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-28-0x00007FFF2F620000-0x00007FFF2F8D6000-memory.dmp
memory/236-29-0x00007FF6EAB60000-0x00007FF6EAC58000-memory.dmp
memory/236-32-0x00007FFF40330000-0x00007FFF40341000-memory.dmp
memory/236-34-0x00007FFF3CAF0000-0x00007FFF3CB12000-memory.dmp
memory/236-35-0x00007FFF39800000-0x00007FFF3982B000-memory.dmp
memory/236-30-0x00007FFF3A820000-0x00007FFF3A854000-memory.dmp
memory/236-38-0x00007FFF38CD0000-0x00007FFF38CE1000-memory.dmp
memory/236-36-0x00007FFF27C80000-0x00007FFF28010000-memory.dmp
memory/236-40-0x00007FFF279E0000-0x00007FFF27C76000-memory.dmp
memory/236-39-0x00007FFF32F70000-0x00007FFF33042000-memory.dmp
memory/236-37-0x00007FFF39E40000-0x00007FFF39E54000-memory.dmp
memory/236-33-0x00007FFF3E8D0000-0x00007FFF3E8E9000-memory.dmp
memory/236-41-0x00007FFF31180000-0x00007FFF31268000-memory.dmp
memory/236-43-0x00007FFF368A0000-0x00007FFF368E1000-memory.dmp
memory/236-46-0x00007FFF333A0000-0x00007FFF333C6000-memory.dmp
memory/236-49-0x00007FFF33330000-0x00007FFF33341000-memory.dmp
memory/236-56-0x00007FFF30D20000-0x00007FFF30D3B000-memory.dmp
memory/236-55-0x00007FFF2E2C0000-0x00007FFF2E36B000-memory.dmp
memory/236-57-0x000002978F810000-0x000002978FBA0000-memory.dmp
memory/236-59-0x00007FFF21D00000-0x00007FFF21F45000-memory.dmp
memory/236-58-0x000002978F130000-0x000002978F2AA000-memory.dmp
memory/236-53-0x00007FFF30D40000-0x00007FFF30D8F000-memory.dmp
memory/236-51-0x00007FFF277D0000-0x00007FFF279DB000-memory.dmp
memory/236-54-0x00007FFF32F20000-0x00007FFF32F45000-memory.dmp
memory/236-52-0x00007FFF2E370000-0x00007FFF2E408000-memory.dmp
memory/236-48-0x00007FFF33350000-0x00007FFF3336A000-memory.dmp
memory/236-50-0x00007FFF32F50000-0x00007FFF32F61000-memory.dmp
memory/236-47-0x00007FFF33370000-0x00007FFF3339D000-memory.dmp
memory/236-42-0x00007FFF2F530000-0x00007FFF2F613000-memory.dmp
memory/236-45-0x00007FFF350E0000-0x00007FFF350F8000-memory.dmp
memory/236-44-0x00007FFF333D0000-0x00007FFF333FF000-memory.dmp