Analysis
- max time kernel
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 02:15
Static task
static1
Behavioral task
behavioral1
Sample
cqf5sbC9w64PMVLO.mp4
Resource
win10v2004-20260911-en
7 signatures
300 seconds
Behavioral task
behavioral2
Sample
cqf5sbC9w64PMVLO.mp4
Resource
win11ltsc2024-20260911-en
5 signatures
300 seconds
Behavioral task
behavioral3
Sample
cqf5sbC9w64PMVLO.mp4
Resource
android-x86-arm-20260325-en
0 signatures
300 seconds
Behavioral task
behavioral4
Sample
cqf5sbC9w64PMVLO.mp4
Resource
android-x64-20260325-en
0 signatures
300 seconds
Behavioral task
behavioral5
Sample
cqf5sbC9w64PMVLO.mp4
Resource
android-x64-arm64-20260325-en
0 signatures
300 seconds
General
- Target cqf5sbC9w64PMVLO.mp4
- Size 5.9MB
- Sample261027-cpppmaxx5k
- SHA256 0dcbfd7349ba72b55d1557d2cbce6a0980476a3c00dc65e85a188366f22ee2d8
- MD5 29588b5be1cc2bdfd39ff5301b3d9f1f
- SHA1 856299d42b2112af7127b3ba9a054f95429f4c9f
- SHA512 a7e9dafaaceb7e8f53c95c53d14cac1e0ff9e20f300bba66bbed1b0cd9b9aa8b4123b6b976172696e9b41510638bbb659b22e14b5fd3faec5211b1a8870019c1
- SSDEEP 98304:VKGMLdvLOsTiQ78NAf4DbG8iJo+ox40IOT0+7iA0IF26XdiGFdTXqpjTyYRF:VKGMJ/2y8NAf4XG8iu+wio0+G3Ivd1dg
- TLSH T1F756230933D1496AD54943B55CDF03B83276FA6A960E8F6B836A2BB02CB5345EF353D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4364 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4364 vlc.exe - Suspicious use of FindShellTrayWindow 23 IoCs
pid Process 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe - Suspicious use of SendNotifyMessage 5 IoCs
pid Process 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe 4364 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\cqf5sbC9w64PMVLO.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4364
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
- Size 93B
- SHA256 b236d7005a4d6bdf67765852ca7173f8be7b24e355d9f87d71c7de5a94e1d4be
- MD5 3b753bc0a1a2cc2e183227624c077a65
- SHA1 e0a0f5582f35ec81942dff6f14fc6cead92d2a1f
- SHA512 4b0cbd2392917f8da3d5894810b194c3c198bf21d831ba3e0c2b24d023c0ef36bfa1697b418722d18e5ad8604de75083d2b4cc18461d7bf20eb93393674ca663
- TLSH T1D7B01240908AF726E6C408A322AC114F0529E40D44853360ABB5B044A411C5F76C1179
- MD5 SHA1 SHA512 TLSH