Analysis
- max time kernel
150s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
07/11/2026, 23:10
General
- Target art/sound/engine/H22A4_ENG/1933o.wav
- Size 558KB
- Sample261107-252fssf15t
- SHA256 062a1977feb3e3c88d83e8b0eb6e9673d7322504b73c5c17ae3c2427a1107563
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\engine\H22A4_ENG\1933o.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
memory/1640-28-0x00007FFF29170000-0x00007FFF29181000-memory.dmp
memory/1640-2-0x00007FFF1A980000-0x00007FFF1AC36000-memory.dmp
memory/1640-3-0x00007FFF1A980000-0x00007FFF1AC36000-memory.dmp
memory/1640-1-0x00007FFF1A980000-0x00007FFF1AC36000-memory.dmp
memory/1640-9-0x00007FFF1A980000-0x00007FFF1AC36000-memory.dmp
memory/1640-10-0x00007FF7E8930000-0x00007FF7E8A28000-memory.dmp
memory/1640-11-0x00007FFF30BC0000-0x00007FFF30BF4000-memory.dmp
memory/1640-18-0x00007FFF304B0000-0x00007FFF304CD000-memory.dmp
memory/1640-20-0x00007FFF2ED30000-0x00007FFF2ED41000-memory.dmp
memory/1640-31-0x00007FFF290B0000-0x00007FFF29117000-memory.dmp
memory/1640-19-0x00007FFF19500000-0x00007FFF1970B000-memory.dmp
memory/1640-30-0x00007FFF29120000-0x00007FFF29150000-memory.dmp
memory/1640-29-0x00007FFF29150000-0x00007FFF29168000-memory.dmp
memory/1640-34-0x00007FFF29090000-0x00007FFF290A1000-memory.dmp
memory/1640-35-0x00007FFF1EEC0000-0x00007FFF1EF17000-memory.dmp
memory/1640-32-0x00007FFF156A0000-0x00007FFF16750000-memory.dmp
memory/1640-0-0x00007FFF1AC2D000-0x00007FFF1AC2F000-memory.dmp
memory/1640-33-0x00007FFF1D190000-0x00007FFF1D20C000-memory.dmp
memory/1640-14-0x00007FFF30530000-0x00007FFF30547000-memory.dmp
memory/1640-26-0x00007FFF29680000-0x00007FFF29691000-memory.dmp
memory/1640-25-0x00007FFF29C80000-0x00007FFF29C91000-memory.dmp
memory/1640-24-0x00007FFF29CC0000-0x00007FFF29CD1000-memory.dmp
memory/1640-23-0x00007FFF2DBE0000-0x00007FFF2DBF8000-memory.dmp
memory/1640-22-0x00007FFF2E9D0000-0x00007FFF2E9F1000-memory.dmp
memory/1640-21-0x00007FFF291B0000-0x00007FFF291F1000-memory.dmp
memory/1640-16-0x00007FFF304F0000-0x00007FFF30507000-memory.dmp
memory/1640-17-0x00007FFF304D0000-0x00007FFF304E1000-memory.dmp
memory/1640-15-0x00007FFF30510000-0x00007FFF30521000-memory.dmp
memory/1640-27-0x00007FFF29190000-0x00007FFF291AB000-memory.dmp
memory/1640-13-0x00007FFF30BA0000-0x00007FFF30BB8000-memory.dmp
memory/1640-84-0x00007FFF156A0000-0x00007FFF16750000-memory.dmp
memory/1640-188-0x00007FFF156A0000-0x00007FFF16750000-memory.dmp
memory/1640-214-0x00007FFF156A0000-0x00007FFF16750000-memory.dmp
memory/1640-240-0x00007FFF156A0000-0x00007FFF16750000-memory.dmp
memory/1640-266-0x00007FFF156A0000-0x00007FFF16750000-memory.dmp
memory/1640-292-0x00007FFF156A0000-0x00007FFF16750000-memory.dmp