Analysis
- max time kernel
60s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/11/2026, 06:02
General
- Target How Do VTubers Hide Their Real Identity.mp4
- Size 55.1MB
- Sample261102-grt5cafs21
- SHA256 bc6c313c1c04852a975ed2c6460aa15cc19dd7f4f4a1a2ff33255f3c09e8ca50
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 27 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\How Do VTubers Hide Their Real Identity.mp4"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
memory/3568-33-0x00007FF89EE70000-0x00007FF89EE81000-memory.dmp
memory/3568-16-0x00007FF88F520000-0x00007FF88F7D6000-memory.dmp
memory/3568-3-0x00007FF88F520000-0x00007FF88F7D6000-memory.dmp
memory/3568-4-0x00007FF88F520000-0x00007FF88F7D6000-memory.dmp
memory/3568-5-0x00007FF88F520000-0x00007FF88F7D6000-memory.dmp
memory/3568-1-0x00007FF88F520000-0x00007FF88F7D6000-memory.dmp
memory/3568-11-0x00007FF88F520000-0x00007FF88F7D6000-memory.dmp
memory/3568-12-0x00007FF88F520000-0x00007FF88F7D6000-memory.dmp
memory/3568-13-0x00007FF88F520000-0x00007FF88F7D6000-memory.dmp
memory/3568-32-0x00007FF8A0BF0000-0x00007FF8A0C01000-memory.dmp
memory/3568-0-0x00007FF88F7CD000-0x00007FF88F7CF000-memory.dmp
memory/3568-15-0x00007FF88F520000-0x00007FF88F7D6000-memory.dmp
memory/3568-18-0x00007FF8A3920000-0x00007FF8A3954000-memory.dmp
memory/3568-20-0x00007FF8A3880000-0x00007FF8A3898000-memory.dmp
memory/3568-21-0x00007FF8A3860000-0x00007FF8A3877000-memory.dmp
memory/3568-23-0x00007FF8A1B70000-0x00007FF8A1B87000-memory.dmp
memory/3568-26-0x00007FF8A1B10000-0x00007FF8A1B21000-memory.dmp
memory/3568-25-0x00007FF8A1B30000-0x00007FF8A1B4D000-memory.dmp
memory/3568-22-0x00007FF8A3840000-0x00007FF8A3851000-memory.dmp
memory/3568-17-0x00007FF67D4F0000-0x00007FF67D5E8000-memory.dmp
memory/3568-24-0x00007FF8A1B50000-0x00007FF8A1B61000-memory.dmp
memory/3568-28-0x00007FF89EE90000-0x00007FF89EED1000-memory.dmp
memory/3568-2-0x00007FF88F520000-0x00007FF88F7D6000-memory.dmp
memory/3568-27-0x00007FF88ED60000-0x00007FF88EF6B000-memory.dmp
memory/3568-14-0x00007FF88F520000-0x00007FF88F7D6000-memory.dmp
memory/3568-34-0x00007FF89EE50000-0x00007FF89EE61000-memory.dmp
memory/3568-38-0x00007FF898470000-0x00007FF8984A0000-memory.dmp
memory/3568-37-0x00007FF8984A0000-0x00007FF8984B8000-memory.dmp
memory/3568-36-0x00007FF89A1A0000-0x00007FF89A1B1000-memory.dmp
memory/3568-39-0x00007FF891900000-0x00007FF891967000-memory.dmp
memory/3568-41-0x00007FF898450000-0x00007FF898461000-memory.dmp
memory/3568-42-0x00007FF891820000-0x00007FF891877000-memory.dmp
memory/3568-30-0x00007FF8A1AE0000-0x00007FF8A1B01000-memory.dmp
memory/3568-35-0x00007FF89EE30000-0x00007FF89EE4B000-memory.dmp
memory/3568-31-0x00007FF8A0C10000-0x00007FF8A0C28000-memory.dmp
memory/3568-40-0x00007FF891880000-0x00007FF8918FC000-memory.dmp
memory/3568-29-0x00007FF88C0C0000-0x00007FF88D170000-memory.dmp
memory/3568-44-0x0000026A68810000-0x0000026A68A51000-memory.dmp
memory/3568-43-0x0000026A66FA0000-0x0000026A6880F000-memory.dmp
memory/3568-47-0x00007FF88F520000-0x00007FF88F7D6000-memory.dmp
memory/3568-57-0x00007FF88C0C0000-0x00007FF88D170000-memory.dmp
memory/3568-71-0x0000026A66FA0000-0x0000026A6880F000-memory.dmp
memory/3568-75-0x00007FF88F520000-0x00007FF88F7D6000-memory.dmp
memory/3568-85-0x00007FF88C0C0000-0x00007FF88D170000-memory.dmp
memory/3568-99-0x0000026A66FA0000-0x0000026A6880F000-memory.dmp
memory/3568-103-0x00007FF88F520000-0x00007FF88F7D6000-memory.dmp
memory/3568-113-0x00007FF88C0C0000-0x00007FF88D170000-memory.dmp
memory/3568-127-0x0000026A66FA0000-0x0000026A6880F000-memory.dmp