Analysis

  • user interaction
    yes
  • max time kernel
    90s
  • max time network
    66s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260911-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    30/10/2026, 02:51

General

  • Target
    السلام عليكم .mp4
  • Size 2.5MB
  • Sample261030-dcc1qsdb35
  • SHA256 d029908bb9fb1b39476f3f3dadd0251f44f9780b6b9ed92a7ccbe1cfb8a6cb24
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\السلام عليكم .mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:784

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        vlc-qt-interface.ini

        • Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
        • Size 149B
        • SHA256 efa54919fef52aa666225bc5293d876ba2354a3016c92e0716dc4257643c5c37
        • MD5 SHA1 SHA512 TLSH

        vlcrc.784

        • Path C:\Users\Admin\AppData\Roaming\vlc\vlcrc.784
        • Size 94KB
        • SHA256 ec45f6e952b43eddc214dba703cf7f31398f3c9f535aad37f42237c56b9b778e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/784-21-0x00007FFAA1E60000-0x00007FFAA1E78000-memory.dmp

        memory/784-18-0x00007FFA94BA0000-0x00007FFA94DAB000-memory.dmp

        memory/784-17-0x00007FFAA1F00000-0x00007FFAA1F11000-memory.dmp

        memory/784-16-0x00007FFAA1F20000-0x00007FFAA1F3D000-memory.dmp

        memory/784-15-0x00007FFAA2030000-0x00007FFAA2041000-memory.dmp

        memory/784-14-0x00007FFAA2D40000-0x00007FFAA2D57000-memory.dmp

        memory/784-13-0x00007FFAA2E20000-0x00007FFAA2E31000-memory.dmp

        memory/784-12-0x00007FFAA5F70000-0x00007FFAA5F87000-memory.dmp

        memory/784-10-0x00007FFAA0D90000-0x00007FFAA1046000-memory.dmp

        memory/784-23-0x00007FFAA1E20000-0x00007FFAA1E31000-memory.dmp

        memory/784-26-0x00007FFAA1CC0000-0x00007FFAA1CD1000-memory.dmp

        memory/784-25-0x00007FFAA1CE0000-0x00007FFAA1CFB000-memory.dmp

        memory/784-24-0x00007FFAA1E00000-0x00007FFAA1E11000-memory.dmp

        memory/784-22-0x00007FFAA1E40000-0x00007FFAA1E51000-memory.dmp

        memory/784-9-0x00007FFAA2FF0000-0x00007FFAA3024000-memory.dmp

        memory/784-19-0x00007FFAA1EB0000-0x00007FFAA1EF1000-memory.dmp

        memory/784-11-0x00007FFAA96B0000-0x00007FFAA96C8000-memory.dmp

        memory/784-29-0x00007FFAA1C70000-0x00007FFAA1CA0000-memory.dmp

        memory/784-20-0x00007FFAA1E80000-0x00007FFAA1EA1000-memory.dmp

        memory/784-30-0x00007FFAA1820000-0x00007FFAA1887000-memory.dmp

        memory/784-33-0x00007FFA95270000-0x00007FFA952C7000-memory.dmp

        memory/784-31-0x00007FFAA17A0000-0x00007FFAA181C000-memory.dmp

        memory/784-32-0x00007FFAA1C50000-0x00007FFAA1C61000-memory.dmp

        memory/784-28-0x00007FFAA1CA0000-0x00007FFAA1CB8000-memory.dmp

        memory/784-27-0x00007FFA93AF0000-0x00007FFA94BA0000-memory.dmp

        memory/784-34-0x00007FFA93970000-0x00007FFA93AF0000-memory.dmp

        memory/784-37-0x00007FFAA0D90000-0x00007FFAA1046000-memory.dmp

        memory/784-54-0x00007FFA93AF0000-0x00007FFA94BA0000-memory.dmp

        memory/784-8-0x00007FF698880000-0x00007FF698978000-memory.dmp

        memory/784-73-0x00007FF698880000-0x00007FF698978000-memory.dmp

        memory/784-74-0x00007FFAA2FF0000-0x00007FFAA3024000-memory.dmp

        memory/784-75-0x00007FFAA0D90000-0x00007FFAA1046000-memory.dmp

        memory/784-76-0x00007FFA93AF0000-0x00007FFA94BA0000-memory.dmp