Analysis
- max time kernel
150s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
07/11/2026, 23:10
General
- Target art/sound/engine/H22A4_ENG/2802o.wav
- Size 530KB
- Sample261107-252fssf15t
- SHA256 3da1c7ec759781fa50c9b33ae0da0c572f3ed3ea53321678057f29ba71f0fbbc
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\engine\H22A4_ENG\2802o.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
memory/4392-20-0x00007FF84B590000-0x00007FF84B79B000-memory.dmp
memory/4392-32-0x00007FF84D500000-0x00007FF84D567000-memory.dmp
memory/4392-3-0x00007FF8472B0000-0x00007FF847566000-memory.dmp
memory/4392-1-0x00007FF8472B0000-0x00007FF847566000-memory.dmp
memory/4392-9-0x00007FF8472B0000-0x00007FF847566000-memory.dmp
memory/4392-16-0x00007FF857590000-0x00007FF8575A7000-memory.dmp
memory/4392-17-0x00007FF856560000-0x00007FF856571000-memory.dmp
memory/4392-11-0x00007FF8592E0000-0x00007FF859314000-memory.dmp
memory/4392-10-0x00007FF688030000-0x00007FF688128000-memory.dmp
memory/4392-15-0x00007FF8575B0000-0x00007FF8575C1000-memory.dmp
memory/4392-34-0x00007FF84D7C0000-0x00007FF84D7D1000-memory.dmp
memory/4392-18-0x00007FF84FC10000-0x00007FF84FC2D000-memory.dmp
memory/4392-14-0x00007FF8582E0000-0x00007FF8582F7000-memory.dmp
memory/4392-13-0x00007FF85D4E0000-0x00007FF85D4F8000-memory.dmp
memory/4392-21-0x00007FF84FBA0000-0x00007FF84FBE1000-memory.dmp
memory/4392-0-0x00007FF84755D000-0x00007FF84755F000-memory.dmp
memory/4392-2-0x00007FF8472B0000-0x00007FF847566000-memory.dmp
memory/4392-26-0x00007FF84F6E0000-0x00007FF84F6F1000-memory.dmp
memory/4392-19-0x00007FF84FBF0000-0x00007FF84FC01000-memory.dmp
memory/4392-33-0x00007FF84C2D0000-0x00007FF84C34C000-memory.dmp
memory/4392-31-0x00007FF84D7E0000-0x00007FF84D810000-memory.dmp
memory/4392-30-0x00007FF84D810000-0x00007FF84D828000-memory.dmp
memory/4392-29-0x00007FF84D830000-0x00007FF84D841000-memory.dmp
memory/4392-28-0x00007FF84E510000-0x00007FF84E52B000-memory.dmp
memory/4392-27-0x00007FF84E530000-0x00007FF84E541000-memory.dmp
memory/4392-25-0x00007FF84F700000-0x00007FF84F711000-memory.dmp
memory/4392-24-0x00007FF84F720000-0x00007FF84F738000-memory.dmp
memory/4392-23-0x00007FF84FB70000-0x00007FF84FB91000-memory.dmp
memory/4392-22-0x0000026414160000-0x0000026415210000-memory.dmp
memory/4392-97-0x0000026414160000-0x0000026415210000-memory.dmp
memory/4392-172-0x0000026414160000-0x0000026415210000-memory.dmp
memory/4392-197-0x0000026414160000-0x0000026415210000-memory.dmp
memory/4392-222-0x0000026414160000-0x0000026415210000-memory.dmp
memory/4392-247-0x0000026414160000-0x0000026415210000-memory.dmp