Managed XDR

vtdl_64cg2hog — malware analysis report

File info

Filename
vtdl_64cg2hog
File type
MS Windows shortcut, Item id list present, ctime=Fri Oct 11 04:27:57 2024, mtime=Fri Oct 11 04:27:57 2024, atime=Fri Oct 11 04:27:57 2024, length=0, window=hide
File size
1.1 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
aa7d00e16bfe3b1922f67528a65b6a1dcfdff2f5
SHA256
e80c56a76371c8ba58d55d35156bfc79e032e5e2b38d2d5fd5e426c1c7ded679
MD5
4866f2076a27a914956494b7030d6a13

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process