Analysis
- max time kernel
899s - max time network
418s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/10/2026, 15:02
General
- Target $TEMP/bgm.xm
- Size 493KB
- Sample261002-seq3pssdpb
- SHA256 f4e6e08e4a8d34aba80d7d1f98163088aef9635fcc72203248381b6e7fa20440
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\$TEMP\bgm.xm"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
memory/6056-0-0x00007FFEEB33D000-0x00007FFEEB33F000-memory.dmp
memory/6056-1-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-2-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-3-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-4-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-5-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-6-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-7-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-8-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-9-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-10-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-11-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-12-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-13-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-14-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-15-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-16-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-17-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-18-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-19-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-20-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-21-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-23-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-22-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-24-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-25-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-26-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-27-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-28-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-29-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-31-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-32-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-30-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-33-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-36-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-38-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-37-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-40-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-39-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-35-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-34-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-46-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-47-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp
memory/6056-54-0x00007FFEEB020000-0x00007FFEEB04B000-memory.dmp
memory/6056-53-0x00007FFEF4900000-0x00007FFEF4922000-memory.dmp
memory/6056-57-0x00007FFEED280000-0x00007FFEED291000-memory.dmp
memory/6056-56-0x00007FFEEF3F0000-0x00007FFEEF404000-memory.dmp
memory/6056-59-0x00007FFEE19C0000-0x00007FFEE1C56000-memory.dmp
memory/6056-58-0x00007FFEE5830000-0x00007FFEE5902000-memory.dmp
memory/6056-67-0x00007FFEEAAA0000-0x00007FFEEAABA000-memory.dmp
memory/6056-60-0x00007FFEE5740000-0x00007FFEE5828000-memory.dmp
memory/6056-74-0x00007FFEE1660000-0x00007FFEE170B000-memory.dmp
memory/6056-70-0x00007FFEE17B0000-0x00007FFEE19BB000-memory.dmp
memory/6056-75-0x00007FFEE8B70000-0x00007FFEE8B8B000-memory.dmp
memory/6056-73-0x00007FFEE4D00000-0x00007FFEE4D25000-memory.dmp
memory/6056-72-0x00007FFEE4D30000-0x00007FFEE4D7F000-memory.dmp
memory/6056-71-0x00007FFEE1710000-0x00007FFEE17A8000-memory.dmp
memory/6056-61-0x00007FFEE4DB0000-0x00007FFEE4E93000-memory.dmp
memory/6056-77-0x00007FFED9AE0000-0x00007FFED9D25000-memory.dmp
memory/6056-69-0x00007FFEE8E80000-0x00007FFEE8E91000-memory.dmp
memory/6056-76-0x000001D797540000-0x000001D798DAF000-memory.dmp
memory/6056-68-0x00007FFEE94D0000-0x00007FFEE94E1000-memory.dmp
memory/6056-66-0x00007FFEE4D80000-0x00007FFEE4DAD000-memory.dmp
memory/6056-63-0x00007FFEE8A30000-0x00007FFEE8A5F000-memory.dmp
memory/6056-65-0x00007FFEE6D60000-0x00007FFEE6D86000-memory.dmp
memory/6056-64-0x00007FFEEB000000-0x00007FFEEB018000-memory.dmp
memory/6056-62-0x00007FFEE56F0000-0x00007FFEE5731000-memory.dmp
memory/6056-55-0x00007FFEE1E50000-0x00007FFEE21E0000-memory.dmp
memory/6056-52-0x00007FFEF6D30000-0x00007FFEF6D49000-memory.dmp
memory/6056-51-0x00007FFEF8490000-0x00007FFEF84A1000-memory.dmp
memory/6056-49-0x00007FFEF46B0000-0x00007FFEF46E4000-memory.dmp
memory/6056-48-0x00007FF7CB3B0000-0x00007FF7CB4A8000-memory.dmp
memory/6056-830-0x00007FFEEB090000-0x00007FFEEB346000-memory.dmp