Analysis
- user interaction
yes - max time kernel
40s - max time network
37s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
27/10/2026, 00:02
General
- Target ScoobyLoader.exe
- Size 2.9MB
- Sample261027-abtejsas7q
- SHA256 1a6e2282b96ac920484184c351d1914b69094b0dbe92e59463c5a86dc1ae6c92
Score
5/10
Malware Config
Signatures
- UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 4 IoCs
- Suspicious use of SendNotifyMessage 3 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ScoobyLoader.exe"C:\Users\Admin\AppData\Local\Temp\ScoobyLoader.exe"1⤵
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
settings.json
memory/1704-6-0x00007FFA7E1CD000-0x00007FFA7E1CF000-memory.dmp
memory/1704-7-0x00007FFA7DF20000-0x00007FFA7E1D6000-memory.dmp
memory/1704-8-0x00007FFA7DF20000-0x00007FFA7E1D6000-memory.dmp
memory/1704-18-0x00007FFA7E910000-0x00007FFA7E944000-memory.dmp
memory/1704-19-0x00007FFA7DF20000-0x00007FFA7E1D6000-memory.dmp
memory/1704-17-0x00007FF600270000-0x00007FF600368000-memory.dmp
memory/1704-20-0x00007FFA7CE70000-0x00007FFA7DF20000-memory.dmp
memory/4988-0-0x00007FF726670000-0x00007FF726F73000-memory.dmp
memory/4988-5-0x00007FF726670000-0x00007FF726F73000-memory.dmp