Analysis
- geolocation tags
nanew-jerseynorth-americaunited-statesususa - max time kernel
899s - max time network
424s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/10/2026, 13:24
Static task
static1
Behavioral task
behavioral1
Sample
DJ Fatboy Vol.1 Track 4 Remake.mp3
Resource
win10v2004-20260911-en
28 signatures
900 seconds
Behavioral task
behavioral2
Sample
DJ Fatboy Vol.1 Track 4 Remake.mp3
Resource
win11ltsc2024-20260911-en
5 signatures
900 seconds
General
- Target DJ Fatboy Vol.1 Track 4 Remake.mp3
- Size 6.2MB
- Sample261003-qnk7psdd67
- SHA256 71c1657d4913b410d2518a3339ae984e48573eb8cf801edc12654436c3b4bd59
- MD5 93e933c5fea364528dd2ed19d4524bd7
- SHA1 58b485dffb95aa3a545490fad56951b13f280243
- SHA512 f852f0d504ac092d4413ad71b111a485c39f6d3e9c0bba8724c1c7538c33195d141371c46ef2dfefbec73a74d51481353c97c001abfb1a0ff85e9d5218bb1452
- SSDEEP 196608:Zz019Jc2DsyzU8Iob4JjSgZ6S+ytKpuKBrvZA:Zz0BxUpo+h5+LuKBDi
- TLSH T1F666235ABB42523FF56B56BD738B0988D49A2EABA030D1C5F522F3C536B318427E05C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4364 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4364 vlc.exe - Suspicious use of FindShellTrayWindow 9 IoCs
pid Process 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe - Suspicious use of SendNotifyMessage 8 IoCs
pid Process 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4364 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\DJ Fatboy Vol.1 Track 4 Remake.mp3"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4364
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:6040
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:4976
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
- Size 117B
- SHA256 4b864939801946ccfbbf4fb6d4a1b0da325b50f2cb33cd2f1b7b31627fbf6358
- MD5 9f006f1b98f4acdbf7ae2f02d7752218
- SHA1 0ecd6c9276f253e6b14ac9ecfc64d18c50a13fab
- SHA512 19b00ce1d0dfe259272ce912374dccf112e43033cb224c0e736f28c1aff7c7c26b2408373d511230901b2ff09e503bf7dc9567338e400950743722d2df702ba7
- TLSH T115B0228CC0C20A3AA28800A322A8200A0820FC0A220032A2CBA8A8C0200088E32C0238
- MD5 SHA1 SHA512 TLSH