Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
30/10/2026, 11:15
General
- Target viewbot (2)/viewbot/go.mod
- Size 218B
- Sample261030-nclyraysc1
- SHA256 946ff61e139546b0e1eda8a74e70fec67a99e8f8f60a71a9035d4b5f4ab5b303
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\viewbot (2)\viewbot\go.mod"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
memory/752-31-0x00007FFF76570000-0x00007FFF765A0000-memory.dmp
memory/752-0-0x00007FFF6B96D000-0x00007FFF6B96F000-memory.dmp
memory/752-3-0x00007FFF6B6C0000-0x00007FFF6B976000-memory.dmp
memory/752-1-0x00007FFF6B6C0000-0x00007FFF6B976000-memory.dmp
memory/752-9-0x00007FFF6B6C0000-0x00007FFF6B976000-memory.dmp
memory/752-10-0x00007FF604780000-0x00007FF604878000-memory.dmp
memory/752-14-0x00007FFF80310000-0x00007FFF80327000-memory.dmp
memory/752-19-0x00007FFF7DDE0000-0x00007FFF7DDF1000-memory.dmp
memory/752-18-0x00007FFF7E900000-0x00007FFF7E91D000-memory.dmp
memory/752-20-0x00007FFF6B4B0000-0x00007FFF6B6BB000-memory.dmp
memory/752-21-0x00007FFF78560000-0x00007FFF785A1000-memory.dmp
memory/752-17-0x00007FFF7F080000-0x00007FFF7F091000-memory.dmp
memory/752-32-0x00007FFF76500000-0x00007FFF76567000-memory.dmp
memory/752-36-0x000001E3049F0000-0x000001E304A01000-memory.dmp
memory/752-35-0x00007FFF74240000-0x00007FFF74297000-memory.dmp
memory/752-34-0x00007FFF76430000-0x00007FFF76441000-memory.dmp
memory/752-2-0x00007FFF6B6C0000-0x00007FFF6B976000-memory.dmp
memory/752-33-0x00007FFF76480000-0x00007FFF764FC000-memory.dmp
memory/752-30-0x00007FFF765A0000-0x00007FFF765B8000-memory.dmp
memory/752-29-0x00007FFF765C0000-0x00007FFF765D1000-memory.dmp
memory/752-28-0x00007FFF765E0000-0x00007FFF765FB000-memory.dmp
memory/752-27-0x00007FFF76600000-0x00007FFF76611000-memory.dmp
memory/752-26-0x00007FFF76E50000-0x00007FFF76E61000-memory.dmp
memory/752-25-0x00007FFF7CF20000-0x00007FFF7CF31000-memory.dmp
memory/752-24-0x00007FFF7DDC0000-0x00007FFF7DDD8000-memory.dmp
memory/752-23-0x00007FFF76E70000-0x00007FFF76E91000-memory.dmp
memory/752-16-0x00007FFF80290000-0x00007FFF802A7000-memory.dmp
memory/752-15-0x00007FFF802B0000-0x00007FFF802C1000-memory.dmp
memory/752-13-0x00007FFF82100000-0x00007FFF82118000-memory.dmp
memory/752-11-0x00007FFF821A0000-0x00007FFF821D4000-memory.dmp
memory/752-22-0x000001E307270000-0x000001E308320000-memory.dmp
memory/752-103-0x000001E307270000-0x000001E308320000-memory.dmp
memory/752-184-0x000001E307270000-0x000001E308320000-memory.dmp
memory/752-211-0x000001E307270000-0x000001E308320000-memory.dmp
memory/752-238-0x000001E307270000-0x000001E308320000-memory.dmp