Analysis
- max time kernel
148s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
07/11/2026, 23:10
General
- Target art/sound/engine/H22A4_ENG/4877o.wav
- Size 443KB
- Sample261107-252fssf15t
- SHA256 032706afa863f6180b5fcb9b6b4bc3eb7eb28946cc510eaf05a8975d8e9c1ea8
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 9 IoCs
- Suspicious use of SendNotifyMessage 8 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\art\sound\engine\H22A4_ENG\4877o.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
vlc-qt-interface.ini
memory/4604-33-0x00007FF9F91E0000-0x00007FF9F91F1000-memory.dmp
memory/4604-0-0x00007FF9F1DFD000-0x00007FF9F1DFF000-memory.dmp
memory/4604-1-0x00007FF9F1B50000-0x00007FF9F1E06000-memory.dmp
memory/4604-8-0x00007FF9F1B50000-0x00007FF9F1E06000-memory.dmp
memory/4604-10-0x00007FFA05EA0000-0x00007FFA05ED4000-memory.dmp
memory/4604-9-0x00007FF7583A0000-0x00007FF758498000-memory.dmp
memory/4604-18-0x00007FF9FC240000-0x00007FF9FC251000-memory.dmp
memory/4604-17-0x00007FF9FC260000-0x00007FF9FC27D000-memory.dmp
memory/4604-16-0x00007FF9FC280000-0x00007FF9FC291000-memory.dmp
memory/4604-19-0x00007FF9F16F0000-0x00007FF9F18FB000-memory.dmp
memory/4604-15-0x00007FF9FC2A0000-0x00007FF9FC2B7000-memory.dmp
memory/4604-14-0x00007FFA03E20000-0x00007FFA03E31000-memory.dmp
memory/4604-13-0x00007FFA077C0000-0x00007FFA077D7000-memory.dmp
memory/4604-12-0x00007FFA08C70000-0x00007FFA08C88000-memory.dmp
memory/4604-22-0x00007FF9FB800000-0x00007FF9FB821000-memory.dmp
memory/4604-31-0x00007FF9F7930000-0x00007FF9F7997000-memory.dmp
memory/4604-2-0x00007FF9F1B50000-0x00007FF9F1E06000-memory.dmp
memory/4604-34-0x00007FF9F4920000-0x00007FF9F4977000-memory.dmp
memory/4604-32-0x00007FF9F78B0000-0x00007FF9F792C000-memory.dmp
memory/4604-30-0x00007FF9F9200000-0x00007FF9F9230000-memory.dmp
memory/4604-29-0x00007FF9F9230000-0x00007FF9F9248000-memory.dmp
memory/4604-28-0x00007FF9F9250000-0x00007FF9F9261000-memory.dmp
memory/4604-27-0x00007FF9F9270000-0x00007FF9F928B000-memory.dmp
memory/4604-26-0x00007FF9F9290000-0x00007FF9F92A1000-memory.dmp
memory/4604-25-0x00007FF9F93E0000-0x00007FF9F93F1000-memory.dmp
memory/4604-24-0x00007FF9F9640000-0x00007FF9F9651000-memory.dmp
memory/4604-23-0x00007FF9FB7E0000-0x00007FF9FB7F8000-memory.dmp
memory/4604-21-0x00007FF9FB830000-0x00007FF9FB871000-memory.dmp
memory/4604-20-0x00007FF9EFEE0000-0x00007FF9F0F90000-memory.dmp
memory/4604-98-0x00007FF9EFEE0000-0x00007FF9F0F90000-memory.dmp
memory/4604-176-0x00007FF9EFEE0000-0x00007FF9F0F90000-memory.dmp
memory/4604-202-0x00007FF9EFEE0000-0x00007FF9F0F90000-memory.dmp
memory/4604-228-0x00007FF9EFEE0000-0x00007FF9F0F90000-memory.dmp
memory/4604-254-0x00007FF9EFEE0000-0x00007FF9F0F90000-memory.dmp
memory/4604-280-0x00007FF9EFEE0000-0x00007FF9F0F90000-memory.dmp