Analysis
- max time kernel
8s - max time network
26s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 22:43
Static task
static1
Behavioral task
behavioral1
Sample
itstime1_1.webm
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
itstime1_1.webm
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
General
- Target itstime1_1.webm
- Size 4.9MB
- Sample260930-2newgasvas
- SHA256 ecdea510fbe30fe42a35df38940eb4ddf16f462b2ec773a4ac7ca8bdbc5c7063
- MD5 28686f22370466d4887236329653464f
- SHA1 0f54772a6b5234d6227859646d2960efefad0292
- SHA512 4472ec50e1e6a4efe6736c9d839607efe7c9479ddd1c684d632e992db8db22e541c4020c1631f68a43747f8ece6796562f1e27afbc010c86a4f78c4d976a4905
- SSDEEP 98304:vOCyqgigbU0A4opIbqQ1jXtNVrV95qjJ0T8iYXdyMJyoHEx4uNj7oLS8:toiuUgRXtNVrr54tfoMJyoHk4CoLT
- TLSH T18F36AEEF9C91F047DE590375E28F46D252BC11CF0A229428FA783E13BD94A16921F6B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3900 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3900 vlc.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe - Suspicious use of SendNotifyMessage 5 IoCs
pid Process 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe - Suspicious use of SetWindowsHookEx 64 IoCs
pid Process 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe 3900 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\itstime1_1.webm"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3900