Analysis
- user interaction
yes - max time kernel
64s - max time network
62s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
24/10/2026, 04:35
General
- Target AnkerGames - Free Pre-installed PC Games.url
- Size 113B
- Sample261024-e7r9ksfx7w
- SHA256 9f87edbeb25a2d74f4d28dda08c94387b01efc114c79296f271405921fb99d24
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 4 IoCs
- Suspicious use of SendNotifyMessage 3 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\System32\rundll32.exe"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL "C:\Users\Admin\AppData\Local\Temp\AnkerGames - Free Pre-installed PC Games.url"1⤵
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\RegisterDismount.3g2"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
memory/2828-8-0x00007FFA12D80000-0x00007FFA13036000-memory.dmp
memory/2828-10-0x00007FFA12D80000-0x00007FFA13036000-memory.dmp
memory/2828-2-0x00007FFA12D80000-0x00007FFA13036000-memory.dmp
memory/2828-4-0x00007FFA12D80000-0x00007FFA13036000-memory.dmp
memory/2828-5-0x00007FFA12D80000-0x00007FFA13036000-memory.dmp
memory/2828-6-0x00007FFA12D80000-0x00007FFA13036000-memory.dmp
memory/2828-7-0x00007FFA12D80000-0x00007FFA13036000-memory.dmp
memory/2828-0-0x00007FFA1302D000-0x00007FFA1302F000-memory.dmp
memory/2828-3-0x00007FFA12D80000-0x00007FFA13036000-memory.dmp
memory/2828-11-0x00007FFA12D80000-0x00007FFA13036000-memory.dmp
memory/2828-9-0x00007FFA12D80000-0x00007FFA13036000-memory.dmp
memory/2828-12-0x00007FFA12D80000-0x00007FFA13036000-memory.dmp
memory/2828-13-0x00007FFA12D80000-0x00007FFA13036000-memory.dmp
memory/2828-1-0x00007FFA12D80000-0x00007FFA13036000-memory.dmp
memory/2828-22-0x00007FF6648A0000-0x00007FF664998000-memory.dmp
memory/2828-25-0x00007FFA12D80000-0x00007FFA13036000-memory.dmp
memory/2828-23-0x00007FFA225B0000-0x00007FFA225E4000-memory.dmp