Overview
overview
6Static
static
1cvs888xgst...pd.zip
windows10-2004-x64
1cvs888xgst...pd.zip
windows11-ltsc_2024-x64
1art/sound/...D.json
windows10-2004-x64
3art/sound/...D.json
windows11-ltsc_2024-x64
3art/sound/...D.json
windows10-2004-x64
3art/sound/...D.json
windows11-ltsc_2024-x64
3art/sound/...D.json
windows10-2004-x64
3art/sound/...D.json
windows11-ltsc_2024-x64
3art/sound/...D.json
windows10-2004-x64
3art/sound/...D.json
windows11-ltsc_2024-x64
3art/sound/...38.wav
windows10-2004-x64
6art/sound/...38.wav
windows11-ltsc_2024-x64
1art/sound/...3o.wav
windows10-2004-x64
6art/sound/...3o.wav
windows11-ltsc_2024-x64
1art/sound/...95.wav
windows10-2004-x64
6art/sound/...95.wav
windows11-ltsc_2024-x64
1art/sound/...93.wav
windows10-2004-x64
6art/sound/...93.wav
windows11-ltsc_2024-x64
1art/sound/...2o.wav
windows10-2004-x64
6art/sound/...2o.wav
windows11-ltsc_2024-x64
1art/sound/...85.wav
windows10-2004-x64
6art/sound/...85.wav
windows11-ltsc_2024-x64
1art/sound/...5o.wav
windows10-2004-x64
6art/sound/...5o.wav
windows11-ltsc_2024-x64
1art/sound/...8o.wav
windows10-2004-x64
6art/sound/...8o.wav
windows11-ltsc_2024-x64
1art/sound/...94.wav
windows10-2004-x64
6art/sound/...94.wav
windows11-ltsc_2024-x64
1art/sound/...7o.wav
windows10-2004-x64
6art/sound/...7o.wav
windows11-ltsc_2024-x64
1art/sound/...9o.wav
windows10-2004-x64
6art/sound/...9o.wav
windows11-ltsc_2024-x64
1Analysis
- max time kernel
152s - max time network
161s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/11/2026, 23:10
Static task
static1
Behavioral task
behavioral1
Sample
cvs888xgstreak_s13 upd.zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
cvs888xgstreak_s13 upd.zip
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
art/sound/blends/H22A4_ENG.sfxBlend2D.json
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
art/sound/blends/H22A4_ENG.sfxBlend2D.json
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
art/sound/blends/H22A4_EXH.sfxBlend2D.json
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
art/sound/blends/H22A4_EXH.sfxBlend2D.json
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
art/sound/blends/HR20DET_SPORT_EXH.sfxBlend2D.json
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
art/sound/blends/HR20DET_SPORT_EXH.sfxBlend2D.json
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
art/sound/blends/SR20DET_SPORT_EXH.sfxBlend2D.json
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
art/sound/blends/SR20DET_SPORT_EXH.sfxBlend2D.json
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
art/sound/engine/H22A4_ENG/1538.wav
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
art/sound/engine/H22A4_ENG/1538.wav
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
art/sound/engine/H22A4_ENG/1933o.wav
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
art/sound/engine/H22A4_ENG/1933o.wav
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
art/sound/engine/H22A4_ENG/1995.wav
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
art/sound/engine/H22A4_ENG/1995.wav
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
art/sound/engine/H22A4_ENG/2693.wav
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
art/sound/engine/H22A4_ENG/2693.wav
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
art/sound/engine/H22A4_ENG/2802o.wav
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
art/sound/engine/H22A4_ENG/2802o.wav
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
art/sound/engine/H22A4_ENG/3485.wav
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
art/sound/engine/H22A4_ENG/3485.wav
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
art/sound/engine/H22A4_ENG/3515o.wav
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
art/sound/engine/H22A4_ENG/3515o.wav
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
art/sound/engine/H22A4_ENG/4218o.wav
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
art/sound/engine/H22A4_ENG/4218o.wav
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
art/sound/engine/H22A4_ENG/4394.wav
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
art/sound/engine/H22A4_ENG/4394.wav
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
art/sound/engine/H22A4_ENG/4877o.wav
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
art/sound/engine/H22A4_ENG/4877o.wav
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
art/sound/engine/H22A4_ENG/5449o.wav
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
art/sound/engine/H22A4_ENG/5449o.wav
Resource
win11ltsc2024-20260911-en
General
- Target art/sound/engine/H22A4_ENG/3515o.wav
- Size 576KB
- Sample261107-252fssf15t
- SHA256 074dfd2f9b348035d44763a151085bd66a6ebc7c4a725a682dfcfd5ce2c4cebf
- MD5 4f54c1970c45b9899f4473e5ad5dede8
- SHA1 ce85b1ed78ea69fed70954c249636436f0f0927d
- SHA512 a8c4db78ec71afa401349f95eaec019ed66161e004a22adbefafbfe236e9376fdd7020f01ab0670b33168db7a55342beffbd763d495cd5a487962eb66851878e
- SSDEEP 12288:Fv21FQTNt2pR3Qu4PfEf0954p8NT+4eJUK7vbtSvBZG:5IsN0dQudM9ypCTzeJUK7vxSa
- TLSH T150C4562F99D1AF19C07D2465CDCAC5552167D9481B3D8D1BAE2B0BD7320B2132BABB3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 5420 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5420 vlc.exe - Suspicious use of FindShellTrayWindow 9 IoCs
pid Process 5420 vlc.exe 5420 vlc.exe 5420 vlc.exe 5420 vlc.exe 5420 vlc.exe 5420 vlc.exe 5420 vlc.exe 5420 vlc.exe 5420 vlc.exe - Suspicious use of SendNotifyMessage 8 IoCs
pid Process 5420 vlc.exe 5420 vlc.exe 5420 vlc.exe 5420 vlc.exe 5420 vlc.exe 5420 vlc.exe 5420 vlc.exe 5420 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5420 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\engine\H22A4_ENG\3515o.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:5420
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
- Size 109B
- SHA256 e95952558eb83670f4c47aa94b1f5b8fe33f84cce5c838de73934fd370374187
- MD5 181ebc1480df9b82b2b96351c6721870
- SHA1 639560965e439c99a00eb89b63d59794d6f40d1f
- SHA512 b777e1baed558e5556d31004502f3f60f027b5bf15a0eb9a018f80cc2300a2441abec0cf602909efeea0a874317a1b30f9c5ec4cbadad5384c68ed287d3f6e79
- TLSH T13EB01240E1C9CFABDA88069361DD431E0422E5055598B3B0F7FDE009154AD5F76DCF34
- MD5 SHA1 SHA512 TLSH