Analysis
- max time kernel
152s - max time network
171s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
07/11/2026, 23:10
General
- Target art/sound/engine/H22A4_ENG/1538.wav
- Size 673KB
- Sample261107-252fssf15t
- SHA256 d8e75c445a945413b03852208e75d85eae7c0cfb70f9d1c6878ddecb534ea507
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\engine\H22A4_ENG\1538.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
memory/4660-24-0x00007FF9A5570000-0x00007FF9A5581000-memory.dmp
memory/4660-0-0x00007FF99A34D000-0x00007FF99A34F000-memory.dmp
memory/4660-3-0x00007FF99A0A0000-0x00007FF99A356000-memory.dmp
memory/4660-1-0x00007FF99A0A0000-0x00007FF99A356000-memory.dmp
memory/4660-9-0x00007FF99A0A0000-0x00007FF99A356000-memory.dmp
memory/4660-10-0x00007FF71F560000-0x00007FF71F658000-memory.dmp
memory/4660-14-0x00007FF9B1D30000-0x00007FF9B1D47000-memory.dmp
memory/4660-19-0x00007FF9AAE50000-0x00007FF9AAE61000-memory.dmp
memory/4660-18-0x00007FF9AC070000-0x00007FF9AC08D000-memory.dmp
memory/4660-22-0x00007FF9A4DB0000-0x00007FF9A4DD1000-memory.dmp
memory/4660-31-0x00007FF9A29A0000-0x00007FF9A2A07000-memory.dmp
memory/4660-30-0x00007FF9A4CE0000-0x00007FF9A4D10000-memory.dmp
memory/4660-29-0x00007FF9A4D10000-0x00007FF9A4D28000-memory.dmp
memory/4660-28-0x00007FF9A4D30000-0x00007FF9A4D41000-memory.dmp
memory/4660-27-0x00007FF9A4D50000-0x00007FF9A4D6B000-memory.dmp
memory/4660-26-0x00007FF9A4D70000-0x00007FF9A4D81000-memory.dmp
memory/4660-2-0x00007FF99A0A0000-0x00007FF99A356000-memory.dmp
memory/4660-25-0x00007FF9A4D90000-0x00007FF9A4DA1000-memory.dmp
memory/4660-20-0x00007FF999C40000-0x00007FF999E4B000-memory.dmp
memory/4660-23-0x00007FF9A6D60000-0x00007FF9A6D78000-memory.dmp
memory/4660-21-0x00007FF9A4DE0000-0x00007FF9A4E21000-memory.dmp
memory/4660-17-0x00007FF9AC240000-0x00007FF9AC251000-memory.dmp
memory/4660-35-0x00007FF9A24D0000-0x00007FF9A2527000-memory.dmp
memory/4660-34-0x00007FF9A4CC0000-0x00007FF9A4CD1000-memory.dmp
memory/4660-33-0x00007FF9A2530000-0x00007FF9A25AC000-memory.dmp
memory/4660-16-0x00007FF9AC430000-0x00007FF9AC447000-memory.dmp
memory/4660-15-0x00007FF9B08C0000-0x00007FF9B08D1000-memory.dmp
memory/4660-13-0x00007FF9B22F0000-0x00007FF9B2308000-memory.dmp
memory/4660-11-0x00007FF9A55D0000-0x00007FF9A5604000-memory.dmp
memory/4660-32-0x000001F7BB0F0000-0x000001F7BC1A0000-memory.dmp
memory/4660-110-0x000001F7BB0F0000-0x000001F7BC1A0000-memory.dmp
memory/4660-188-0x000001F7BB0F0000-0x000001F7BC1A0000-memory.dmp
memory/4660-214-0x000001F7BB0F0000-0x000001F7BC1A0000-memory.dmp
memory/4660-240-0x000001F7BB0F0000-0x000001F7BC1A0000-memory.dmp
memory/4660-266-0x000001F7BB0F0000-0x000001F7BC1A0000-memory.dmp