Analysis

  • max time kernel
    152s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/11/2026, 23:10

General

  • Target
    art/sound/engine/H22A4_ENG/4394.wav
  • Size 184KB
  • Sample261107-252fssf15t
  • SHA256 ed839dc2ed37e3b9e816dcbcb987e1633fe1b728f3b477a5967be3c230e161ba
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\engine\H22A4_ENG\4394.wav"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2024

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        vlc-qt-interface.ini

        • Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
        • Size 108B
        • SHA256 749c4ba305f4d757622ba1151bdd3088227bb4d2441e54ae5aef6c903fba397d
        • MD5 SHA1 SHA512 TLSH

        memory/2024-32-0x00007FFBA5E60000-0x00007FFBA5EC7000-memory.dmp

        memory/2024-0-0x00007FFB97B6D000-0x00007FFB97B6F000-memory.dmp

        memory/2024-3-0x00007FFB978C0000-0x00007FFB97B76000-memory.dmp

        memory/2024-1-0x00007FFB978C0000-0x00007FFB97B76000-memory.dmp

        memory/2024-9-0x00007FFB978C0000-0x00007FFB97B76000-memory.dmp

        memory/2024-10-0x00007FF7911F0000-0x00007FF7912E8000-memory.dmp

        memory/2024-11-0x00007FFBAA850000-0x00007FFBAA884000-memory.dmp

        memory/2024-19-0x00007FFBA7600000-0x00007FFBA7611000-memory.dmp

        memory/2024-17-0x00007FFBA89F0000-0x00007FFBA8A01000-memory.dmp

        memory/2024-16-0x00007FFBA8A10000-0x00007FFBA8A27000-memory.dmp

        memory/2024-20-0x00007FFB93DD0000-0x00007FFB93FDB000-memory.dmp

        memory/2024-21-0x00007FFBA5FE0000-0x00007FFBA6021000-memory.dmp

        memory/2024-15-0x00007FFBA8A30000-0x00007FFBA8A41000-memory.dmp

        memory/2024-14-0x00007FFBAA830000-0x00007FFBAA847000-memory.dmp

        memory/2024-35-0x00007FFB9ED40000-0x00007FFB9ED97000-memory.dmp

        memory/2024-34-0x00007FFBA5E40000-0x00007FFBA5E51000-memory.dmp

        memory/2024-2-0x00007FFB978C0000-0x00007FFB97B76000-memory.dmp

        memory/2024-33-0x00007FFB9EDA0000-0x00007FFB9EE1C000-memory.dmp

        memory/2024-31-0x00007FFBA5ED0000-0x00007FFBA5F00000-memory.dmp

        memory/2024-30-0x00007FFBA5F00000-0x00007FFBA5F18000-memory.dmp

        memory/2024-29-0x00007FFBA5F20000-0x00007FFBA5F31000-memory.dmp

        memory/2024-28-0x00007FFBA5F40000-0x00007FFBA5F5B000-memory.dmp

        memory/2024-27-0x00007FFBA5F60000-0x00007FFBA5F71000-memory.dmp

        memory/2024-26-0x00007FFBA5F80000-0x00007FFBA5F91000-memory.dmp

        memory/2024-25-0x00007FFBA5FA0000-0x00007FFBA5FB1000-memory.dmp

        memory/2024-24-0x00007FFBA5FC0000-0x00007FFBA5FD8000-memory.dmp

        memory/2024-23-0x00007FFBA62D0000-0x00007FFBA62F1000-memory.dmp

        memory/2024-13-0x00007FFBABE30000-0x00007FFBABE48000-memory.dmp

        memory/2024-18-0x00007FFBA89D0000-0x00007FFBA89ED000-memory.dmp

        memory/2024-22-0x00000255FA360000-0x00000255FB410000-memory.dmp

        memory/2024-74-0x00000255FA360000-0x00000255FB410000-memory.dmp

        memory/2024-178-0x00000255FA360000-0x00000255FB410000-memory.dmp

        memory/2024-204-0x00000255FA360000-0x00000255FB410000-memory.dmp

        memory/2024-230-0x00000255FA360000-0x00000255FB410000-memory.dmp

        memory/2024-256-0x00000255FA360000-0x00000255FB410000-memory.dmp