Analysis
- user interaction
yes - max time kernel
91s - max time network
68s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
02/11/2026, 03:44
General
- Target RESCALE_FREE.zip
- Size 79.9MB
- Sample261102-eajaeazxgv
- SHA256 c294398abe8302baf9daba8d4a8de7cd04a6bae9333ad4398a3f156735303418
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\RESCALE_FREE.zip1⤵
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\SplitUnregister.MTS"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
memory/4016-35-0x00007FFD11450000-0x00007FFD11461000-memory.dmp
memory/4016-38-0x00007FFD10E20000-0x00007FFD10E32000-memory.dmp
memory/4016-3-0x00007FFD13130000-0x00007FFD133E6000-memory.dmp
memory/4016-4-0x00007FFD13130000-0x00007FFD133E6000-memory.dmp
memory/4016-1-0x00007FFD13130000-0x00007FFD133E6000-memory.dmp
memory/4016-10-0x00007FFD13130000-0x00007FFD133E6000-memory.dmp
memory/4016-12-0x00007FFD133F0000-0x00007FFD13424000-memory.dmp
memory/4016-20-0x00007FFD129B0000-0x00007FFD129C1000-memory.dmp
memory/4016-19-0x00007FFD150D0000-0x00007FFD150ED000-memory.dmp
memory/4016-18-0x00007FFD158D0000-0x00007FFD158E1000-memory.dmp
memory/4016-21-0x00007FFD127A0000-0x00007FFD129AB000-memory.dmp
memory/4016-17-0x00007FFD15970000-0x00007FFD15987000-memory.dmp
memory/4016-16-0x00007FFD17D70000-0x00007FFD17D81000-memory.dmp
memory/4016-33-0x00007FFD114F0000-0x00007FFD11557000-memory.dmp
memory/4016-40-0x000002196A780000-0x000002196A791000-memory.dmp
memory/4016-39-0x000002196A760000-0x000002196A771000-memory.dmp
memory/4016-0-0x00007FFD133DD000-0x00007FFD133DF000-memory.dmp
memory/4016-37-0x00007FFD113C0000-0x00007FFD113E8000-memory.dmp
memory/4016-2-0x00007FFD13130000-0x00007FFD133E6000-memory.dmp
memory/4016-36-0x00007FFD113F0000-0x00007FFD11447000-memory.dmp
memory/4016-30-0x00007FFD115B0000-0x00007FFD115C1000-memory.dmp
memory/4016-32-0x00007FFD11560000-0x00007FFD11590000-memory.dmp
memory/4016-31-0x00007FFD11590000-0x00007FFD115A8000-memory.dmp
memory/4016-34-0x00007FFD11470000-0x00007FFD114EC000-memory.dmp
memory/4016-29-0x00007FFD115D0000-0x00007FFD115EB000-memory.dmp
memory/4016-28-0x00007FFD115F0000-0x00007FFD11601000-memory.dmp
memory/4016-27-0x00007FFD11610000-0x00007FFD11621000-memory.dmp
memory/4016-26-0x00007FFD11630000-0x00007FFD11641000-memory.dmp
memory/4016-25-0x00007FFD11650000-0x00007FFD11668000-memory.dmp
memory/4016-24-0x00007FFD11670000-0x00007FFD11691000-memory.dmp
memory/4016-23-0x00007FFD116A0000-0x00007FFD116E1000-memory.dmp
memory/4016-15-0x00007FFD21C30000-0x00007FFD21C47000-memory.dmp
memory/4016-14-0x00007FFD22C40000-0x00007FFD22C58000-memory.dmp
memory/4016-11-0x00007FF7193E0000-0x00007FF7194D8000-memory.dmp
memory/4016-22-0x00007FFD116F0000-0x00007FFD127A0000-memory.dmp
memory/4016-50-0x00007FFD133F0000-0x00007FFD13424000-memory.dmp
memory/4016-49-0x00007FF7193E0000-0x00007FF7194D8000-memory.dmp
memory/4016-51-0x00007FFD13130000-0x00007FFD133E6000-memory.dmp
memory/4016-52-0x00007FFD116F0000-0x00007FFD127A0000-memory.dmp