Analysis
- user interaction
yes - max time kernel
149s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
09/10/2026, 18:44
General
- Target Potato Graphics Pack (Updated)/AMD-Intel/Poatato Graphics For AMD-Intel.bat
- Size 56KB
- Sample261009-xdjpfsdf97
- SHA256 c8b23ed5f875785c6606b910901ca0304fb411077a90648136164475a61cf212
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 4 IoCs
- Suspicious use of SendNotifyMessage 3 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Potato Graphics Pack (Updated)\AMD-Intel\Poatato Graphics For AMD-Intel.bat"1⤵
- Executes a command shell one-liner
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
vlcrc.4148
memory/4148-0-0x00007FF8C400D000-0x00007FF8C400F000-memory.dmp
memory/4148-1-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-2-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-3-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-4-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-5-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-6-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-7-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-9-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-8-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-10-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-11-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-12-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-13-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-14-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-15-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-16-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-17-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-19-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-18-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-21-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-20-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-23-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-24-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-22-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-25-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-26-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-27-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-29-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-28-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-30-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-35-0x00007FF8C55F0000-0x00007FF8C5624000-memory.dmp
memory/4148-39-0x00007FF8C5450000-0x00007FF8C5472000-memory.dmp
memory/4148-38-0x00007FF8C5480000-0x00007FF8C5499000-memory.dmp
memory/4148-37-0x00007FF8C55D0000-0x00007FF8C55E1000-memory.dmp
memory/4148-40-0x00007FF8C5420000-0x00007FF8C544B000-memory.dmp
memory/4148-34-0x00007FF691360000-0x00007FF691458000-memory.dmp
memory/4148-43-0x00007FF8C39B0000-0x00007FF8C39C1000-memory.dmp
memory/4148-45-0x00007FF8C3630000-0x00007FF8C38C6000-memory.dmp
memory/4148-46-0x00007FF8C3540000-0x00007FF8C3628000-memory.dmp
memory/4148-42-0x00007FF8C4FF0000-0x00007FF8C5004000-memory.dmp
memory/4148-51-0x00007FF8C3380000-0x00007FF8C33A6000-memory.dmp
memory/4148-58-0x00007FF8C2FF0000-0x00007FF8C303F000-memory.dmp
memory/4148-64-0x000002063C480000-0x000002063C4ED000-memory.dmp
memory/4148-63-0x000002063A740000-0x000002063A768000-memory.dmp
memory/4148-66-0x00007FF8B93E0000-0x00007FF8B9625000-memory.dmp
memory/4148-65-0x000002063C600000-0x000002063C8C9000-memory.dmp
memory/4148-62-0x00007FF8C2ED0000-0x00007FF8C2EE2000-memory.dmp
memory/4148-61-0x00007FF8C2EF0000-0x00007FF8C2F0B000-memory.dmp
memory/4148-60-0x00007FF8C2F10000-0x00007FF8C2FBB000-memory.dmp
memory/4148-59-0x00007FF8C2FC0000-0x00007FF8C2FE5000-memory.dmp
memory/4148-44-0x00007FF8C38D0000-0x00007FF8C39A2000-memory.dmp
memory/4148-57-0x00007FF8C3040000-0x00007FF8C30D8000-memory.dmp
memory/4148-56-0x00007FF8C30E0000-0x00007FF8C32EB000-memory.dmp
memory/4148-55-0x00007FF8C32F0000-0x00007FF8C3301000-memory.dmp
memory/4148-54-0x00007FF8C3310000-0x00007FF8C3321000-memory.dmp
memory/4148-53-0x00007FF8C3330000-0x00007FF8C334A000-memory.dmp
memory/4148-52-0x00007FF8C3350000-0x00007FF8C337D000-memory.dmp
memory/4148-50-0x00007FF8C33B0000-0x00007FF8C33C8000-memory.dmp
memory/4148-49-0x00007FF8C33D0000-0x00007FF8C33FF000-memory.dmp
memory/4148-48-0x00007FF8C3400000-0x00007FF8C3441000-memory.dmp
memory/4148-47-0x00007FF8C3450000-0x00007FF8C3533000-memory.dmp
memory/4148-41-0x00007FF8C39D0000-0x00007FF8C3D60000-memory.dmp
memory/4148-36-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-79-0x00007FF8C55F0000-0x00007FF8C5624000-memory.dmp
memory/4148-80-0x00007FF8C3D60000-0x00007FF8C4016000-memory.dmp
memory/4148-78-0x00007FF691360000-0x00007FF691458000-memory.dmp