Analysis
- max time kernel
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 21:09
General
- Target th06nc/data/bgm/th06_01.opus
- Size 3.0MB
- Sample260910-zzghbsweld
- SHA256 49a711314d9fb083f0b00c8fe083da43cd69efb7b023626bc34f9e3e213f22a2
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\th06nc\data\bgm\th06_01.opus"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3748-0-0x00007FF8C847D000-0x00007FF8C847F000-memory.dmp
memory/3748-1-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-2-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-3-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-4-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-5-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-7-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-9-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-8-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-6-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-10-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-11-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-12-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-13-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-14-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-16-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-15-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-17-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-22-0x00007FF8C81D0000-0x00007FF8C8486000-memory.dmp
memory/3748-23-0x00007FF686EA0000-0x00007FF686F98000-memory.dmp
memory/3748-26-0x00007FF8E06B0000-0x00007FF8E06C1000-memory.dmp
memory/3748-24-0x00007FF8DEB60000-0x00007FF8DEB94000-memory.dmp
memory/3748-28-0x00007FF8DEAF0000-0x00007FF8DEB12000-memory.dmp
memory/3748-29-0x00007FF8DEAC0000-0x00007FF8DEAEB000-memory.dmp
memory/3748-27-0x00007FF8DEFC0000-0x00007FF8DEFD9000-memory.dmp
memory/3748-33-0x00007FF8CBCB0000-0x00007FF8CBD82000-memory.dmp
memory/3748-38-0x00007FF8DB110000-0x00007FF8DB13F000-memory.dmp
memory/3748-36-0x00007FF8C9270000-0x00007FF8C9353000-memory.dmp
memory/3748-44-0x00007FF8D3520000-0x00007FF8D3531000-memory.dmp
memory/3748-43-0x00007FF8D3540000-0x00007FF8D3551000-memory.dmp
memory/3748-50-0x00007FF8D3110000-0x00007FF8D312B000-memory.dmp
memory/3748-53-0x00007FF8C1890000-0x00007FF8C1AD5000-memory.dmp
memory/3748-51-0x00000212BBCC0000-0x00000212BBD6D000-memory.dmp
memory/3748-49-0x00007FF8C91C0000-0x00007FF8C926B000-memory.dmp
memory/3748-46-0x00007FF8C95C0000-0x00007FF8C9658000-memory.dmp
memory/3748-52-0x00000212BC2E0000-0x00000212BC359000-memory.dmp
memory/3748-48-0x00007FF8D0EE0000-0x00007FF8D0F05000-memory.dmp
memory/3748-47-0x00007FF8D3040000-0x00007FF8D308F000-memory.dmp
memory/3748-45-0x00007FF8C7740000-0x00007FF8C794B000-memory.dmp
memory/3748-42-0x00007FF8D3560000-0x00007FF8D357A000-memory.dmp
memory/3748-41-0x00007FF8D3580000-0x00007FF8D35AD000-memory.dmp
memory/3748-40-0x00007FF8D35B0000-0x00007FF8D35D6000-memory.dmp
memory/3748-35-0x00007FF8CBBC0000-0x00007FF8CBCA8000-memory.dmp
memory/3748-39-0x00007FF8D5800000-0x00007FF8D5818000-memory.dmp
memory/3748-37-0x00007FF8DEA50000-0x00007FF8DEA91000-memory.dmp
memory/3748-34-0x00007FF8C7950000-0x00007FF8C7BE6000-memory.dmp
memory/3748-32-0x00007FF8DEAA0000-0x00007FF8DEAB1000-memory.dmp
memory/3748-30-0x00007FF8C7BF0000-0x00007FF8C7F80000-memory.dmp
memory/3748-31-0x00007FF8DEDA0000-0x00007FF8DEDB4000-memory.dmp