Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/10/2026, 04:26
Static task
static1
Behavioral task
behavioral1
Sample
Cyberpunk - S02E01.mkv
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Cyberpunk - S02E01.mkv
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
General
- Target Cyberpunk - S02E01.mkv
- Size 383.7MB
- Sample261030-e2xbcadc32
- SHA256 2cdb46b353e4be0feb1819c27012a6ba92d28785856f201fed073f92fdd74696
- MD5 2971bbecee0ad3d3f71d7638ba26ee29
- SHA1 eaa549c629edaed9829dcc6366020b4e1b65c59e
- SHA512 ced45bf872d463bf01d2a417d73fc680c1185d324e88bfbe4434e63f90f6696c2a6b7a60796a27984a1f18e95a89e52592b5e9f0012a7d574ec43e740f7f2d72
- SSDEEP 6291456:183v1mpUVz3VrKBwczlH9QNvqPR5lkHgTrQ2qbzp4RuLm3+6MfDkJerA+M11IKhX:e1PVzlWBwczldflIwU2qbzp4R6mNJcKF
- TLSH T18B19332AC7E34485EC2617F0D1A06177932BCCD973061BEB9885F82F5DA173CAE99E50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1172 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1172 vlc.exe - Suspicious use of FindShellTrayWindow 27 IoCs
pid Process 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe - Suspicious use of SendNotifyMessage 5 IoCs
pid Process 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe 1172 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Cyberpunk - S02E01.mkv"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1172
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
- Size 99B
- SHA256 5ae7fffc21a6172dd61a6d663fbd1daca174ae19f8f48b6ab3ba6e35d33e35ff
- MD5 6cb7c0955d69efc5866a3e8b98965606
- SHA1 8a1b1a7fae3bde8cccc3627ad9acf78bd205524a
- SHA512 4697a36d8e55dcd8575dfe80eed0a0f3493c48f06c703638ae4579455383a4f1fb2b66e7409f3dd7b34956a20de2accb7ae2c3b775472869bd369805aaf61edb
- TLSH T118B01244D489977ADB94045361C8230E0932E815444C33A157B8F5C80015C6F77D5234
- MD5 SHA1 SHA512 TLSH