Analysis
- max time kernel
148s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
07/11/2026, 23:10
General
- Target art/sound/engine/H22A4_ENG/4218o.wav
- Size 533KB
- Sample261107-252fssf15t
- SHA256 2717f1a6f066598b9a7be411b646da1f4d48f0a3649a7adb626423f9bf27bb43
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\engine\H22A4_ENG\4218o.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
memory/4288-34-0x00007FFDC6490000-0x00007FFDC64E7000-memory.dmp
memory/4288-0-0x00007FFDD246D000-0x00007FFDD246F000-memory.dmp
memory/4288-1-0x00007FFDD21C0000-0x00007FFDD2476000-memory.dmp
memory/4288-8-0x00007FFDD21C0000-0x00007FFDD2476000-memory.dmp
memory/4288-9-0x00007FF6E9AD0000-0x00007FF6E9BC8000-memory.dmp
memory/4288-10-0x00007FFDD9C60000-0x00007FFDD9C94000-memory.dmp
memory/4288-15-0x00007FFDD2160000-0x00007FFDD2177000-memory.dmp
memory/4288-18-0x00007FFDD2100000-0x00007FFDD2111000-memory.dmp
memory/4288-28-0x00007FFDC8420000-0x00007FFDC8438000-memory.dmp
memory/4288-27-0x00007FFDC8440000-0x00007FFDC8451000-memory.dmp
memory/4288-26-0x00007FFDD1420000-0x00007FFDD143B000-memory.dmp
memory/4288-19-0x00007FFDC06B0000-0x00007FFDC08BB000-memory.dmp
memory/4288-25-0x00007FFDD1480000-0x00007FFDD1491000-memory.dmp
memory/4288-24-0x00007FFDD1670000-0x00007FFDD1681000-memory.dmp
memory/4288-32-0x00007FFDC7FE0000-0x00007FFDC805C000-memory.dmp
memory/4288-33-0x00007FFDC8100000-0x00007FFDC8111000-memory.dmp
memory/4288-2-0x00007FFDD21C0000-0x00007FFDD2476000-memory.dmp
memory/4288-31-0x00007FFDC8350000-0x00007FFDC83B7000-memory.dmp
memory/4288-30-0x00007FFDC83F0000-0x00007FFDC8420000-memory.dmp
memory/4288-23-0x00007FFDD19C0000-0x00007FFDD19D1000-memory.dmp
memory/4288-22-0x00007FFDD2080000-0x00007FFDD2098000-memory.dmp
memory/4288-21-0x00007FFDD20D0000-0x00007FFDD20F1000-memory.dmp
memory/4288-20-0x00007FFDC9F30000-0x00007FFDC9F71000-memory.dmp
memory/4288-17-0x00007FFDD2120000-0x00007FFDD213D000-memory.dmp
memory/4288-16-0x00007FFDD2140000-0x00007FFDD2151000-memory.dmp
memory/4288-14-0x00007FFDD63E0000-0x00007FFDD63F1000-memory.dmp
memory/4288-13-0x00007FFDD8F50000-0x00007FFDD8F67000-memory.dmp
memory/4288-12-0x00007FFDD9C00000-0x00007FFDD9C18000-memory.dmp
memory/4288-29-0x00000164586B0000-0x0000016459760000-memory.dmp
memory/4288-81-0x00000164586B0000-0x0000016459760000-memory.dmp
memory/4288-185-0x00000164586B0000-0x0000016459760000-memory.dmp
memory/4288-211-0x00000164586B0000-0x0000016459760000-memory.dmp
memory/4288-237-0x00000164586B0000-0x0000016459760000-memory.dmp
memory/4288-263-0x00000164586B0000-0x0000016459760000-memory.dmp
memory/4288-289-0x00000164586B0000-0x0000016459760000-memory.dmp