Analysis
- max time kernel
152s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
07/11/2026, 23:10
General
- Target art/sound/engine/H22A4_ENG/3485.wav
- Size 142KB
- Sample261107-252fssf15t
- SHA256 1dd7e0ad5a5857b07ee095bad0d8076667cbc320ce43dfbfbe49c48f129ed763
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 3 IoCs
- Suspicious use of SendNotifyMessage 2 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\engine\H22A4_ENG\3485.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4792-0-0x00007FFAA0B7D000-0x00007FFAA0B7F000-memory.dmp
memory/4792-1-0x00007FFAA08D0000-0x00007FFAA0B86000-memory.dmp
memory/4792-2-0x00007FFAA08D0000-0x00007FFAA0B86000-memory.dmp
memory/4792-3-0x00007FFAA08D0000-0x00007FFAA0B86000-memory.dmp
memory/4792-4-0x00007FFAA08D0000-0x00007FFAA0B86000-memory.dmp
memory/4792-5-0x00007FF710B70000-0x00007FF710C68000-memory.dmp
memory/4792-6-0x00007FFAB55C0000-0x00007FFAB55F4000-memory.dmp
memory/4792-14-0x00007FFAB2550000-0x00007FFAB2561000-memory.dmp
memory/4792-13-0x00007FFAB2570000-0x00007FFAB258D000-memory.dmp
memory/4792-12-0x00007FFAB2590000-0x00007FFAB25A1000-memory.dmp
memory/4792-25-0x00007FFAB0DF0000-0x00007FFAB0E20000-memory.dmp
memory/4792-24-0x00007FFAB0E20000-0x00007FFAB0E38000-memory.dmp
memory/4792-23-0x00007FFAB0E40000-0x00007FFAB0E51000-memory.dmp
memory/4792-22-0x00007FFAB0E60000-0x00007FFAB0E7B000-memory.dmp
memory/4792-15-0x00007FFAB0F00000-0x00007FFAB110B000-memory.dmp
memory/4792-29-0x00007FFAB0D60000-0x00007FFAB0D71000-memory.dmp
memory/4792-30-0x00007FFAA9820000-0x00007FFAA9877000-memory.dmp
memory/4792-26-0x00007FFA9DBD0000-0x00007FFA9EC80000-memory.dmp
memory/4792-28-0x00007FFAA55E0000-0x00007FFAA565C000-memory.dmp
memory/4792-27-0x00007FFAB0D80000-0x00007FFAB0DE7000-memory.dmp
memory/4792-21-0x00007FFAB1400000-0x00007FFAB1411000-memory.dmp
memory/4792-20-0x00007FFAB1420000-0x00007FFAB1431000-memory.dmp
memory/4792-19-0x00007FFAB1940000-0x00007FFAB1951000-memory.dmp
memory/4792-18-0x00007FFAB2190000-0x00007FFAB21A8000-memory.dmp
memory/4792-17-0x00007FFAB21B0000-0x00007FFAB21D1000-memory.dmp
memory/4792-16-0x00007FFAB2500000-0x00007FFAB2541000-memory.dmp
memory/4792-10-0x00007FFAB6920000-0x00007FFAB6931000-memory.dmp
memory/4792-9-0x00007FFAB6D40000-0x00007FFAB6D57000-memory.dmp
memory/4792-8-0x00007FFAB7170000-0x00007FFAB7188000-memory.dmp
memory/4792-11-0x00007FFAB5560000-0x00007FFAB5577000-memory.dmp
memory/4792-78-0x00007FFA9DBD0000-0x00007FFA9EC80000-memory.dmp
memory/4792-182-0x00007FFA9DBD0000-0x00007FFA9EC80000-memory.dmp
memory/4792-208-0x00007FFA9DBD0000-0x00007FFA9EC80000-memory.dmp
memory/4792-234-0x00007FFA9DBD0000-0x00007FFA9EC80000-memory.dmp
memory/4792-260-0x00007FFA9DBD0000-0x00007FFA9EC80000-memory.dmp