Analysis
- max time kernel
149s - max time network
138s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/09/2026, 17:49
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-16 16-25-56.mkv
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16 16-25-56.mkv
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
General
- Target 2026-09-16 16-25-56.mkv
- Size 17.1MB
- Sample260916-weamhatcng
- SHA256 a17ae2c0a7687f811692bfa8a06b85dc83596e0e4a47a0ecf49e3085e9a04b06
- MD5 f30deb77d183aea769568a33c3c5a378
- SHA1 6caf935a4ab1a6e5464fd2d76cdb0376cd446a9c
- SHA512 8ecd39a93074ae246da2b58ca895aeefcfe4e235c15a785b5f202ab499567d545087bbbbff1de4fb24e49b73c937536ac934830a69ebd7ee635ce2dd5d819f85
- SSDEEP 393216:OfIDElL2niZbB5ndHtLeqtuqpwfVnFK8tN480bQ1J9oF1eyBEjpq41FOhfC8sGI:OcEnbB5dHVeqtulf1I8XD40JQZYR1Ehq
- TLSH T11D07334639F99F67F6A67B30484434B0BD710B1B1421B3DB9CD38E2368AB8DA6E513D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 5616 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5616 vlc.exe - Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe - Suspicious use of SendNotifyMessage 8 IoCs
pid Process 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe 5616 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\2026-09-16 16-25-56.mkv"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:5616