Analysis
- user interaction
yes - max time kernel
96s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
30/10/2026, 02:51
General
- Target السلام عليكم .mp4
- Size 2.5MB
- Sample261030-dcc1qsdb35
- SHA256 d029908bb9fb1b39476f3f3dadd0251f44f9780b6b9ed92a7ccbe1cfb8a6cb24
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 26 IoCs
- Suspicious use of SendNotifyMessage 9 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\السلام عليكم .mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
vlcrc.1908
memory/1908-31-0x00007FF885150000-0x00007FF885161000-memory.dmp
memory/1908-25-0x00007FF8856C0000-0x00007FF8856D1000-memory.dmp
memory/1908-4-0x00007FF882B10000-0x00007FF882DC6000-memory.dmp
memory/1908-2-0x00007FF882B10000-0x00007FF882DC6000-memory.dmp
memory/1908-10-0x00007FF882B10000-0x00007FF882DC6000-memory.dmp
memory/1908-11-0x00007FF882B10000-0x00007FF882DC6000-memory.dmp
memory/1908-12-0x00007FF882B10000-0x00007FF882DC6000-memory.dmp
memory/1908-13-0x00007FF882B10000-0x00007FF882DC6000-memory.dmp
memory/1908-14-0x00007FF882B10000-0x00007FF882DC6000-memory.dmp
memory/1908-15-0x00007FF882B10000-0x00007FF882DC6000-memory.dmp
memory/1908-16-0x00007FF69DB00000-0x00007FF69DBF8000-memory.dmp
memory/1908-23-0x00007FF8882F0000-0x00007FF888301000-memory.dmp
memory/1908-30-0x00007FF8851F0000-0x00007FF885201000-memory.dmp
memory/1908-24-0x00007FF887710000-0x00007FF88772D000-memory.dmp
memory/1908-22-0x00007FF889820000-0x00007FF889837000-memory.dmp
memory/1908-37-0x00007FF883D00000-0x00007FF883D67000-memory.dmp
memory/1908-26-0x00007FF87E2E0000-0x00007FF87E4EB000-memory.dmp
memory/1908-36-0x00007FF884F60000-0x00007FF884F90000-memory.dmp
memory/1908-35-0x00007FF884F90000-0x00007FF884FA8000-memory.dmp
memory/1908-34-0x00007FF884FB0000-0x00007FF884FC1000-memory.dmp
memory/1908-33-0x00007FF884FD0000-0x00007FF884FEB000-memory.dmp
memory/1908-32-0x00007FF884FF0000-0x00007FF885001000-memory.dmp
memory/1908-3-0x00007FF882B10000-0x00007FF882DC6000-memory.dmp
memory/1908-0-0x00007FF882DBD000-0x00007FF882DBF000-memory.dmp
memory/1908-41-0x00007FF880970000-0x00007FF8809C7000-memory.dmp
memory/1908-28-0x00007FF885690000-0x00007FF8856B1000-memory.dmp
memory/1908-27-0x00007FF885480000-0x00007FF8854C1000-memory.dmp
memory/1908-21-0x00007FF88E390000-0x00007FF88E3A1000-memory.dmp
memory/1908-19-0x00007FF895370000-0x00007FF895388000-memory.dmp
memory/1908-17-0x00007FF8877B0000-0x00007FF8877E4000-memory.dmp
memory/1908-20-0x00007FF895150000-0x00007FF895167000-memory.dmp
memory/1908-29-0x00007FF885460000-0x00007FF885478000-memory.dmp
memory/1908-43-0x00007FF882B10000-0x00007FF882DC6000-memory.dmp
memory/1908-42-0x00000204071C0000-0x00000204073C6000-memory.dmp
memory/1908-40-0x00007FF883CE0000-0x00007FF883CF1000-memory.dmp
memory/1908-39-0x00007FF882A90000-0x00007FF882B0C000-memory.dmp
memory/1908-38-0x00000204050F0000-0x00000204061A0000-memory.dmp
memory/1908-66-0x00000204050F0000-0x00000204061A0000-memory.dmp
memory/1908-73-0x00007FF882B10000-0x00007FF882DC6000-memory.dmp
memory/1908-93-0x00000204050F0000-0x00000204061A0000-memory.dmp
memory/1908-157-0x00007FF882B10000-0x00007FF882DC6000-memory.dmp
memory/1908-177-0x00000204050F0000-0x00000204061A0000-memory.dmp
memory/1908-1-0x00007FF882B10000-0x00007FF882DC6000-memory.dmp
memory/1908-194-0x00007FF8877B0000-0x00007FF8877E4000-memory.dmp
memory/1908-195-0x00007FF882B10000-0x00007FF882DC6000-memory.dmp
memory/1908-193-0x00007FF69DB00000-0x00007FF69DBF8000-memory.dmp
memory/1908-196-0x00000204050F0000-0x00000204061A0000-memory.dmp