Analysis
- max time kernel
899s - max time network
448s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
27/10/2026, 15:22
General
- Target VID_20261023_085237.mp4
- Size 87.2MB
- Sample261027-sr7k8aez3n
- SHA256 70c055f990dd104b871d47b10c27f89e75870652aabaa9edd8464de1cc9c76b8
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 24 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\VID_20261023_085237.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
memory/5092-0-0x00007FFA1CEED000-0x00007FFA1CEEF000-memory.dmp
memory/5092-1-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-2-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-3-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-9-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-10-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-12-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-11-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-13-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-14-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-15-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-17-0x00007FFA33240000-0x00007FFA33274000-memory.dmp
memory/5092-16-0x00007FF68AEE0000-0x00007FF68AFD8000-memory.dmp
memory/5092-19-0x00007FFA34BB0000-0x00007FFA34BC8000-memory.dmp
memory/5092-20-0x00007FFA281D0000-0x00007FFA281E7000-memory.dmp
memory/5092-22-0x00007FFA28190000-0x00007FFA281A7000-memory.dmp
memory/5092-21-0x00007FFA281B0000-0x00007FFA281C1000-memory.dmp
memory/5092-23-0x00007FFA28170000-0x00007FFA28181000-memory.dmp
memory/5092-24-0x00007FFA28150000-0x00007FFA2816D000-memory.dmp
memory/5092-25-0x00007FFA28130000-0x00007FFA28141000-memory.dmp
memory/5092-29-0x00007FFA278F0000-0x00007FFA27908000-memory.dmp
memory/5092-18-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-28-0x00007FFA27910000-0x00007FFA27931000-memory.dmp
memory/5092-26-0x00007FFA1C7E0000-0x00007FFA1C9EB000-memory.dmp
memory/5092-36-0x00007FFA20DD0000-0x00007FFA20E00000-memory.dmp
memory/5092-35-0x00007FFA20E00000-0x00007FFA20E18000-memory.dmp
memory/5092-34-0x00007FFA23650000-0x00007FFA23661000-memory.dmp
memory/5092-33-0x00007FFA24FF0000-0x00007FFA2500B000-memory.dmp
memory/5092-32-0x00007FFA25010000-0x00007FFA25021000-memory.dmp
memory/5092-31-0x00007FFA25500000-0x00007FFA25511000-memory.dmp
memory/5092-30-0x00007FFA25C80000-0x00007FFA25C91000-memory.dmp
memory/5092-27-0x00007FFA27940000-0x00007FFA27981000-memory.dmp
memory/5092-39-0x00007FFA20CE0000-0x00007FFA20D5C000-memory.dmp
memory/5092-40-0x00007FFA20CC0000-0x00007FFA20CD1000-memory.dmp
memory/5092-38-0x00007FFA20D60000-0x00007FFA20DC7000-memory.dmp
memory/5092-41-0x00007FFA20C60000-0x00007FFA20CB7000-memory.dmp
memory/5092-37-0x000001E2521F0000-0x000001E2532A0000-memory.dmp
memory/5092-42-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-64-0x000001E2521F0000-0x000001E2532A0000-memory.dmp
memory/5092-90-0x000001E2521F0000-0x000001E2532A0000-memory.dmp
memory/5092-116-0x000001E2521F0000-0x000001E2532A0000-memory.dmp
memory/5092-123-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-194-0x000001E2521F0000-0x000001E2532A0000-memory.dmp
memory/5092-201-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-220-0x000001E2521F0000-0x000001E2532A0000-memory.dmp
memory/5092-227-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-246-0x000001E2521F0000-0x000001E2532A0000-memory.dmp
memory/5092-253-0x00007FFA1CC40000-0x00007FFA1CEF6000-memory.dmp
memory/5092-272-0x000001E2521F0000-0x000001E2532A0000-memory.dmp
memory/5092-298-0x000001E2521F0000-0x000001E2532A0000-memory.dmp
memory/5092-350-0x000001E2521F0000-0x000001E2532A0000-memory.dmp
memory/5092-376-0x000001E2521F0000-0x000001E2532A0000-memory.dmp