Overview
overview
3Static
static
3In Stars And Time.7z
windows10-ltsc_2021-x64
1In Stars a....dylib
windows10-ltsc_2021-x64
3In Stars a...2.node
windows10-ltsc_2021-x64
3In Stars a...4.node
windows10-ltsc_2021-x64
3In Stars a...4.node
windows10-ltsc_2021-x64
3In Stars a...32.dll
windows10-ltsc_2021-x64
3In Stars a...64.dll
windows10-ltsc_2021-x64
1In Stars a...rks.js
windows10-ltsc_2021-x64
3In Stars a....dylib
windows10-ltsc_2021-x64
3In Stars a...ket.so
windows10-ltsc_2021-x64
3In Stars a...t64.so
windows10-ltsc_2021-x64
3In Stars a....dylib
windows10-ltsc_2021-x64
3In Stars a...api.so
windows10-ltsc_2021-x64
3In Stars a...i64.so
windows10-ltsc_2021-x64
3In Stars a...et.dll
windows10-ltsc_2021-x64
3In Stars a...et.lib
windows10-ltsc_2021-x64
3In Stars a...64.dll
windows10-ltsc_2021-x64
1In Stars a...64.lib
windows10-ltsc_2021-x64
3In Stars a...pi.dll
windows10-ltsc_2021-x64
3In Stars a...pi.lib
windows10-ltsc_2021-x64
3In Stars a...64.dll
windows10-ltsc_2021-x64
1In Stars a...64.lib
windows10-ltsc_2021-x64
3In Stars a...eamcmd
windows10-ltsc_2021-x64
3In Stars a...cmd.sh
windows10-ltsc_2021-x64
3In Stars a...o.webm
windows10-ltsc_2021-x64
1In Stars a...bm.dat
windows10-ltsc_2021-x64
3In Stars a...bm.ivf
windows10-ltsc_2021-x64
3In Stars a...bm.ogg
windows10-ltsc_2021-x64
1In Stars a...e.json
windows10-ltsc_2021-x64
3In Stars a...pgsave
windows10-ltsc_2021-x64
3In Stars a...e.html
windows10-ltsc_2021-x64
1In Stars a...e.html
windows10-ltsc_2021-x64
1Analysis
- max time kernel
299s - max time network
84s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
30/10/2026, 18:42
Static task
static1
Behavioral task
behavioral1
Sample
In Stars And Time.7z
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral2
Sample
In Stars and Time/www/lib/crashhandler.dylib
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral3
Sample
In Stars and Time/www/lib/greenworks-linux32.node
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral4
Sample
In Stars and Time/www/lib/greenworks-linux64.node
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral5
Sample
In Stars and Time/www/lib/greenworks-osx64.node
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral6
Sample
In Stars and Time/www/lib/greenworks-win32.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral7
Sample
In Stars and Time/www/lib/greenworks-win64.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral8
Sample
In Stars and Time/www/lib/greenworks.js
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral9
Sample
In Stars and Time/www/lib/libsdkencryptedappticket.dylib
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral10
Sample
In Stars and Time/www/lib/libsdkencryptedappticket.so
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral11
Sample
In Stars and Time/www/lib/libsdkencryptedappticket64.so
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral12
Sample
In Stars and Time/www/lib/libsteam_api.dylib
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral13
Sample
In Stars and Time/www/lib/libsteam_api.so
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral14
Sample
In Stars and Time/www/lib/libsteam_api64.so
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral15
Sample
In Stars and Time/www/lib/sdkencryptedappticket.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral16
Sample
In Stars and Time/www/lib/sdkencryptedappticket.lib
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral17
Sample
In Stars and Time/www/lib/sdkencryptedappticket64.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral18
Sample
In Stars and Time/www/lib/sdkencryptedappticket64.lib
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral19
Sample
In Stars and Time/www/lib/steam_api.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral20
Sample
In Stars and Time/www/lib/steam_api.lib
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral21
Sample
In Stars and Time/www/lib/steam_api64.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral22
Sample
In Stars and Time/www/lib/steam_api64.lib
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral23
Sample
In Stars and Time/www/lib/steamcmd
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral24
Sample
In Stars and Time/www/lib/steamcmd.sh
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral25
Sample
In Stars and Time/www/movies/Intro.webm
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral26
Sample
In Stars and Time/www/movies/Intro.webm.dat
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral27
Sample
In Stars and Time/www/movies/Intro.webm.ivf
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral28
Sample
In Stars and Time/www/movies/Intro.webm.ogg
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral29
Sample
In Stars and Time/www/package.json
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral30
Sample
In Stars and Time/www/save/config.rpgsave
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral31
Sample
In Stars and Time/www/supertoolsengine.html
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral32
Sample
In Stars and Time/www/translationengine.html
Resource
win10ltsc2021-20260911-en
General
- Target In Stars and Time/www/movies/Intro.webm
- Size 2.7MB
- Sample261030-xcap6aev8x
- SHA256 3233b0b2a470251b57c3a5c862d5291458177b99afe59abf8f80219d5dc550bf
- MD5 40eb8950b6d709f4f5ca88078fadb49f
- SHA1 32a4b4911c8d600bef585b76dba6502cf004b4b9
- SHA512 ca7a1f866311978489e35dded1c740baaa4037527b838afa53e124109890dccd5708af74dbe8633265ec79aa25d1f5044fd9b718f4109ca156569176714d8262
- SSDEEP 49152:Lg7puhgwym+altHaHc1Xo34yXjM50ZC4Zf7ZRjwHyjAcOznyTkk8TZuZ44+q:Sp0Rlthc+50ZC49Z1Iy8cSkXPMq
- TLSH T129D53335BE40CAC2FD9B0971DF6363E86B7DA0C6524227BDE8602E35DA1C7823935647
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 764 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 764 vlc.exe - Suspicious use of FindShellTrayWindow 24 IoCs
pid Process 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 764 vlc.exe 764 vlc.exe 764 vlc.exe 764 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\In Stars and Time\www\movies\Intro.webm"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:764
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
- Size 118B
- SHA256 a764bdc14214e14dbab22c5197d5c1bf9e8d780a7a2ce1fbf786cc0379ff6956
- MD5 3c0745db90a4c03787ea0e60142eabe5
- SHA1 dae7010b3967cb4de764e1ff76635ad6d582c468
- SHA512 f257218ac6cab3e80a7ff3047622ef1813d06fd4535a10801379cbed681313d1f9e1c79989d46a415eb1db944828213ada4f874e4922b49c31555aa6e5ddbad2
- TLSH T1FFB09B45808E575BF68404523645220E4067A505404432519759960D0150C4776C4375
- MD5 SHA1 SHA512 TLSH