Analysis
- max time kernel
899s - max time network
489s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
02/10/2026, 15:02
General
- Target $TEMP/bgm.xm
- Size 493KB
- Sample261002-seq3pssdpb
- SHA256 f4e6e08e4a8d34aba80d7d1f98163088aef9635fcc72203248381b6e7fa20440
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\$TEMP\bgm.xm"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
memory/1796-5-0x00007FF687D20000-0x00007FF687E18000-memory.dmp
memory/1796-6-0x00007FF989EB0000-0x00007FF989EE4000-memory.dmp
memory/1796-9-0x00007FF986510000-0x00007FF986529000-memory.dmp
memory/1796-7-0x00007FF977FC0000-0x00007FF978276000-memory.dmp
memory/1796-11-0x00007FF9862A0000-0x00007FF9862CB000-memory.dmp
memory/1796-8-0x00007FF989E80000-0x00007FF989E91000-memory.dmp
memory/1796-10-0x00007FF986490000-0x00007FF9864B2000-memory.dmp
memory/1796-14-0x00007FF986260000-0x00007FF986271000-memory.dmp
memory/1796-15-0x00007FF9860D0000-0x00007FF9861A2000-memory.dmp
memory/1796-13-0x00007FF986280000-0x00007FF986294000-memory.dmp
memory/1796-12-0x00007FF977C30000-0x00007FF977FC0000-memory.dmp
memory/1796-17-0x00007FF985E90000-0x00007FF985F78000-memory.dmp
memory/1796-16-0x00007FF977740000-0x00007FF9779D6000-memory.dmp
memory/1796-18-0x00007FF978B20000-0x00007FF978C03000-memory.dmp
memory/1796-26-0x00007FF9856B0000-0x00007FF9856C1000-memory.dmp
memory/1796-25-0x00007FF985940000-0x00007FF985951000-memory.dmp
memory/1796-24-0x00007FF985E10000-0x00007FF985E2A000-memory.dmp
memory/1796-23-0x00007FF985710000-0x00007FF98573D000-memory.dmp
memory/1796-22-0x00007FF985E30000-0x00007FF985E56000-memory.dmp
memory/1796-21-0x00007FF986060000-0x00007FF986078000-memory.dmp
memory/1796-20-0x00007FF985E60000-0x00007FF985E8F000-memory.dmp
memory/1796-19-0x00007FF986080000-0x00007FF9860C1000-memory.dmp
memory/1796-27-0x00007FF977530000-0x00007FF97773B000-memory.dmp
memory/1796-28-0x00007FF978A80000-0x00007FF978B18000-memory.dmp
memory/1796-30-0x00007FF985680000-0x00007FF9856A5000-memory.dmp
memory/1796-33-0x00007FF981690000-0x00007FF9816A2000-memory.dmp
memory/1796-32-0x00007FF985590000-0x00007FF9855AB000-memory.dmp
memory/1796-29-0x00007FF97E050000-0x00007FF97E09F000-memory.dmp
memory/1796-34-0x000001E015EB0000-0x000001E016179000-memory.dmp
memory/1796-35-0x00007FF9714E0000-0x00007FF971725000-memory.dmp
memory/1796-31-0x00007FF977480000-0x00007FF97752B000-memory.dmp
memory/1796-782-0x00007FF977FC0000-0x00007FF978276000-memory.dmp
memory/1796-813-0x00007FF977FC0000-0x00007FF978276000-memory.dmp