Analysis
- max time kernel
152s - max time network
193s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 21:09
General
- Target th06nc/data/bgm/th06_14.opus
- Size 3.9MB
- Sample260910-zzghbsweld
- SHA256 273dd53a7f56c4693b7b3f7b8bce4039ba9bde4e2d238a5cb993f3294c9ece42
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\th06nc\data\bgm\th06_14.opus"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4660-0-0x00007FFBE17DD000-0x00007FFBE17DF000-memory.dmp
memory/4660-1-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/4660-2-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/4660-3-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/4660-4-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/4660-6-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/4660-5-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/4660-8-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/4660-7-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/4660-9-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/4660-10-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/4660-11-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/4660-12-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/4660-17-0x00007FFBE1530000-0x00007FFBE17E6000-memory.dmp
memory/4660-18-0x00007FF79EA50000-0x00007FF79EB48000-memory.dmp
memory/4660-19-0x00007FFBF4820000-0x00007FFBF4854000-memory.dmp
memory/4660-22-0x00007FFBF90F0000-0x00007FFBF9109000-memory.dmp
memory/4660-21-0x00007FFBF9170000-0x00007FFBF9181000-memory.dmp
memory/4660-24-0x00007FFBF2AD0000-0x00007FFBF2AFB000-memory.dmp
memory/4660-23-0x00007FFBF44F0000-0x00007FFBF4512000-memory.dmp
memory/4660-25-0x00007FFBE0B10000-0x00007FFBE0EA0000-memory.dmp
memory/4660-27-0x00007FFBF2A90000-0x00007FFBF2AA1000-memory.dmp
memory/4660-26-0x00007FFBF2AB0000-0x00007FFBF2AC4000-memory.dmp
memory/4660-28-0x00007FFBE9440000-0x00007FFBE9512000-memory.dmp
memory/4660-30-0x00007FFBE75B0000-0x00007FFBE7698000-memory.dmp
memory/4660-33-0x00007FFBECA40000-0x00007FFBECA6F000-memory.dmp
memory/4660-31-0x00007FFBE3C00000-0x00007FFBE3CE3000-memory.dmp
memory/4660-39-0x00007FFBE8990000-0x00007FFBE89A1000-memory.dmp
memory/4660-38-0x00007FFBE9650000-0x00007FFBE9661000-memory.dmp
memory/4660-42-0x00007FFBE7560000-0x00007FFBE75AF000-memory.dmp
memory/4660-50-0x00007FFBDA580000-0x00007FFBDA7C5000-memory.dmp
memory/4660-49-0x000001E63C520000-0x000001E63C69A000-memory.dmp
memory/4660-43-0x00007FFBE8960000-0x00007FFBE8985000-memory.dmp
memory/4660-41-0x00007FFBE7030000-0x00007FFBE70C8000-memory.dmp
memory/4660-48-0x000001E63C500000-0x000001E63C512000-memory.dmp
memory/4660-47-0x000001E63C4E0000-0x000001E63C4F3000-memory.dmp
memory/4660-46-0x000001E63AD10000-0x000001E63AD21000-memory.dmp
memory/4660-45-0x00007FFBE7010000-0x00007FFBE702B000-memory.dmp
memory/4660-44-0x00007FFBE3B50000-0x00007FFBE3BFB000-memory.dmp
memory/4660-40-0x00007FFBE0660000-0x00007FFBE086B000-memory.dmp
memory/4660-37-0x00007FFBE9980000-0x00007FFBE999A000-memory.dmp
memory/4660-36-0x00007FFBE99A0000-0x00007FFBE99CD000-memory.dmp
memory/4660-35-0x00007FFBEC9F0000-0x00007FFBECA16000-memory.dmp
memory/4660-29-0x00007FFBE0870000-0x00007FFBE0B06000-memory.dmp
memory/4660-34-0x00007FFBECA20000-0x00007FFBECA38000-memory.dmp
memory/4660-32-0x00007FFBECA70000-0x00007FFBECAB1000-memory.dmp