Overview
overview
3Static
static
3In Stars And Time.7z
windows10-ltsc_2021-x64
1In Stars a....dylib
windows10-ltsc_2021-x64
3In Stars a...2.node
windows10-ltsc_2021-x64
3In Stars a...4.node
windows10-ltsc_2021-x64
3In Stars a...4.node
windows10-ltsc_2021-x64
3In Stars a...32.dll
windows10-ltsc_2021-x64
3In Stars a...64.dll
windows10-ltsc_2021-x64
1In Stars a...rks.js
windows10-ltsc_2021-x64
3In Stars a....dylib
windows10-ltsc_2021-x64
3In Stars a...ket.so
windows10-ltsc_2021-x64
3In Stars a...t64.so
windows10-ltsc_2021-x64
3In Stars a....dylib
windows10-ltsc_2021-x64
3In Stars a...api.so
windows10-ltsc_2021-x64
3In Stars a...i64.so
windows10-ltsc_2021-x64
3In Stars a...et.dll
windows10-ltsc_2021-x64
3In Stars a...et.lib
windows10-ltsc_2021-x64
3In Stars a...64.dll
windows10-ltsc_2021-x64
1In Stars a...64.lib
windows10-ltsc_2021-x64
3In Stars a...pi.dll
windows10-ltsc_2021-x64
3In Stars a...pi.lib
windows10-ltsc_2021-x64
3In Stars a...64.dll
windows10-ltsc_2021-x64
1In Stars a...64.lib
windows10-ltsc_2021-x64
3In Stars a...eamcmd
windows10-ltsc_2021-x64
3In Stars a...cmd.sh
windows10-ltsc_2021-x64
3In Stars a...o.webm
windows10-ltsc_2021-x64
1In Stars a...bm.dat
windows10-ltsc_2021-x64
3In Stars a...bm.ivf
windows10-ltsc_2021-x64
3In Stars a...bm.ogg
windows10-ltsc_2021-x64
1In Stars a...e.json
windows10-ltsc_2021-x64
3In Stars a...pgsave
windows10-ltsc_2021-x64
3In Stars a...e.html
windows10-ltsc_2021-x64
1In Stars a...e.html
windows10-ltsc_2021-x64
1Analysis
- max time kernel
299s - max time network
323s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
30/10/2026, 18:42
Static task
static1
Behavioral task
behavioral1
Sample
In Stars And Time.7z
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral2
Sample
In Stars and Time/www/lib/crashhandler.dylib
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral3
Sample
In Stars and Time/www/lib/greenworks-linux32.node
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral4
Sample
In Stars and Time/www/lib/greenworks-linux64.node
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral5
Sample
In Stars and Time/www/lib/greenworks-osx64.node
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral6
Sample
In Stars and Time/www/lib/greenworks-win32.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral7
Sample
In Stars and Time/www/lib/greenworks-win64.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral8
Sample
In Stars and Time/www/lib/greenworks.js
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral9
Sample
In Stars and Time/www/lib/libsdkencryptedappticket.dylib
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral10
Sample
In Stars and Time/www/lib/libsdkencryptedappticket.so
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral11
Sample
In Stars and Time/www/lib/libsdkencryptedappticket64.so
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral12
Sample
In Stars and Time/www/lib/libsteam_api.dylib
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral13
Sample
In Stars and Time/www/lib/libsteam_api.so
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral14
Sample
In Stars and Time/www/lib/libsteam_api64.so
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral15
Sample
In Stars and Time/www/lib/sdkencryptedappticket.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral16
Sample
In Stars and Time/www/lib/sdkencryptedappticket.lib
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral17
Sample
In Stars and Time/www/lib/sdkencryptedappticket64.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral18
Sample
In Stars and Time/www/lib/sdkencryptedappticket64.lib
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral19
Sample
In Stars and Time/www/lib/steam_api.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral20
Sample
In Stars and Time/www/lib/steam_api.lib
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral21
Sample
In Stars and Time/www/lib/steam_api64.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral22
Sample
In Stars and Time/www/lib/steam_api64.lib
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral23
Sample
In Stars and Time/www/lib/steamcmd
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral24
Sample
In Stars and Time/www/lib/steamcmd.sh
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral25
Sample
In Stars and Time/www/movies/Intro.webm
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral26
Sample
In Stars and Time/www/movies/Intro.webm.dat
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral27
Sample
In Stars and Time/www/movies/Intro.webm.ivf
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral28
Sample
In Stars and Time/www/movies/Intro.webm.ogg
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral29
Sample
In Stars and Time/www/package.json
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral30
Sample
In Stars and Time/www/save/config.rpgsave
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral31
Sample
In Stars and Time/www/supertoolsengine.html
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral32
Sample
In Stars and Time/www/translationengine.html
Resource
win10ltsc2021-20260911-en
General
- Target In Stars and Time/www/movies/Intro.webm.ogg
- Size 328KB
- Sample261030-xcap6aev8x
- SHA256 49801378443d6d4e925ca2afce7aec22b8e268776683708eb62cc04f3f52c1f8
- MD5 622868e124f8298683a2a0750faa4fba
- SHA1 ff6af456d6dd327c383cc53746ad3a68e950ec90
- SHA512 4d7af1496aac6cbec5492452431926e1da36d5f7d63ca310b21fd943cc6f7873bd4c2458b62e3057b86b1ba0a00a37c14f4679322b008eacb6e47b378abf5971
- SSDEEP 6144:mRfLxFRaVuQ/m8mkpP+W3aYhxcyrqKYgG3qbDMi0XkHTc+eZegd6Jllij4sBem:Qxl8JpPb3BcyrqVh6bDMiYkz/eZsLRst
- TLSH T1FE64239ACE72C3E7EC8410FAA4B49519532AF3A1EB9425CFCC51506C7B41BB84EE541F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4308 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4308 vlc.exe - Suspicious use of FindShellTrayWindow 8 IoCs
pid Process 4308 vlc.exe 4308 vlc.exe 4308 vlc.exe 4308 vlc.exe 4308 vlc.exe 4308 vlc.exe 4308 vlc.exe 4308 vlc.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 4308 vlc.exe 4308 vlc.exe 4308 vlc.exe 4308 vlc.exe 4308 vlc.exe 4308 vlc.exe 4308 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4308 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\In Stars and Time\www\movies\Intro.webm.ogg"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4308
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
- Size 122B
- SHA256 34d0b6bd80d4798c59d49e3b200b809baab48494e8e8688e4a80a373cec1514f
- MD5 9e2781c7680d3e4a941fad4ceb3d8382
- SHA1 24c21bf7429260477452742080d37b1a2e2d1cb1
- SHA512 3f6d15511b04a2d6e94b5004fd862fa0ca02cecad136f1b30c440f3ebc0ed733c4700b9952d28e549ee328e845bd636efc356d4be8bf853e86fa032b3667315c
- TLSH T13CB02B04808E575BF68004423344120E5063A800404432116399960C0010C4771D0335
- MD5 SHA1 SHA512 TLSH