Analysis
- user interaction
yes - max time kernel
10s - max time network
11s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/10/2026, 04:36
Static task
static1
Behavioral task
behavioral1
Sample
opw.au
Resource
win10v2004-20260911-en
5 signatures
150 seconds
General
- Target opw.au
- Size 9B
- Sample261002-e8fl6shb57
- SHA256 0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5
- MD5 9d1ead73e678fa2f51a70a933b0bf017
- SHA1 d205cbd6783332a212c5ae92d73c77178c2d2f28
- SHA512 935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3940 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3940 vlc.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 3940 vlc.exe 3940 vlc.exe 3940 vlc.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 3940 vlc.exe 3940 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3940 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\opw.au"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3940