Analysis

  • max time kernel
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/11/2026, 23:10

General

  • Target
    art/sound/engine/H22A4_ENG/2693.wav
  • Size 133KB
  • Sample261107-252fssf15t
  • SHA256 750c4b9881d10789df60e66c0cafe3492a39cf83dd688256b4fca0747d5cedde
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\engine\H22A4_ENG\2693.wav"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        vlc-qt-interface.ini

        • Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
        • Size 108B
        • SHA256 4db3ee41911f7e38341c16c3ca5a0ef83bb8924cc4a54dcc97b37ac91cb1838d
        • MD5 SHA1 SHA512 TLSH

        memory/2356-22-0x00007FFDE7BC0000-0x00007FFDE8C70000-memory.dmp

        memory/2356-2-0x00007FFDEDE60000-0x00007FFDEE116000-memory.dmp

        memory/2356-3-0x00007FFDEDE60000-0x00007FFDEE116000-memory.dmp

        memory/2356-1-0x00007FFDEDE60000-0x00007FFDEE116000-memory.dmp

        memory/2356-9-0x00007FFDEDE60000-0x00007FFDEE116000-memory.dmp

        memory/2356-10-0x00007FF7734B0000-0x00007FF7735A8000-memory.dmp

        memory/2356-11-0x00007FFE028F0000-0x00007FFE02924000-memory.dmp

        memory/2356-19-0x00007FFDF7700000-0x00007FFDF7711000-memory.dmp

        memory/2356-18-0x00007FFDFF6A0000-0x00007FFDFF6BD000-memory.dmp

        memory/2356-17-0x00007FFE00940000-0x00007FFE00951000-memory.dmp

        memory/2356-16-0x00007FFE01050000-0x00007FFE01067000-memory.dmp

        memory/2356-21-0x00007FFDF4000000-0x00007FFDF4041000-memory.dmp

        memory/2356-13-0x00007FFE02890000-0x00007FFE028A8000-memory.dmp

        memory/2356-15-0x00007FFE02850000-0x00007FFE02861000-memory.dmp

        memory/2356-20-0x00007FFDEA910000-0x00007FFDEAB1B000-memory.dmp

        memory/2356-14-0x00007FFE02870000-0x00007FFE02887000-memory.dmp

        memory/2356-0-0x00007FFDEE10D000-0x00007FFDEE10F000-memory.dmp

        memory/2356-35-0x00007FFDEFF30000-0x00007FFDEFF87000-memory.dmp

        memory/2356-24-0x00007FFDF5AE0000-0x00007FFDF5AF8000-memory.dmp

        memory/2356-33-0x00007FFDF1210000-0x00007FFDF128C000-memory.dmp

        memory/2356-32-0x00007FFDF1290000-0x00007FFDF12F7000-memory.dmp

        memory/2356-31-0x00007FFDF1720000-0x00007FFDF1750000-memory.dmp

        memory/2356-30-0x00007FFDF1750000-0x00007FFDF1768000-memory.dmp

        memory/2356-29-0x00007FFDF1770000-0x00007FFDF1781000-memory.dmp

        memory/2356-28-0x00007FFDF3310000-0x00007FFDF332B000-memory.dmp

        memory/2356-27-0x00007FFDF3330000-0x00007FFDF3341000-memory.dmp

        memory/2356-26-0x00007FFDF3F90000-0x00007FFDF3FA1000-memory.dmp

        memory/2356-25-0x00007FFDF3FB0000-0x00007FFDF3FC1000-memory.dmp

        memory/2356-34-0x00007FFDF1670000-0x00007FFDF1681000-memory.dmp

        memory/2356-23-0x00007FFDF3FD0000-0x00007FFDF3FF1000-memory.dmp

        memory/2356-74-0x00007FFDE7BC0000-0x00007FFDE8C70000-memory.dmp

        memory/2356-178-0x00007FFDE7BC0000-0x00007FFDE8C70000-memory.dmp

        memory/2356-204-0x00007FFDE7BC0000-0x00007FFDE8C70000-memory.dmp

        memory/2356-230-0x00007FFDE7BC0000-0x00007FFDE8C70000-memory.dmp

        memory/2356-256-0x00007FFDE7BC0000-0x00007FFDE8C70000-memory.dmp

        memory/2356-282-0x00007FFDE7BC0000-0x00007FFDE8C70000-memory.dmp