Managed XDR

porn_video.rtf.lnk — malware analysis report

File info

Filename
porn_video.rtf.lnk
File type
MS Windows shortcut, Item id list present, Points to a file or directory, Has command line arguments, Icon number=1, Archive, ctime=Fri Oct 13 09:52:30 2023, mtime=Mon Aug 19 01:37:47 2024, atime=Fri Oct 13 09:52:30 2023, length=170496, window=hide
File size
1.7 KB
First seen
Last seen

Environment

win7/x64 en

Hashes

SHA1
4425d03044a5e6b03b686fe01520ff6f1ff82688
SHA256
3fe4ba8bb9f238c0d2b3268830c4e1092d8f40bd6e256d00826a1c161a110b58
MD5
d2e0cf5ca52ff673d705537d074d0270

Signatures

Defense Evasion

T1027.002 unnamed_memory_regions: Code was executed in unnamed regions
T1497.001 antisandbox_script_timer: Detected script timer window (indicative of sleep style evasion)

Discovery

T1497.001 antisandbox_script_timer: Detected script timer window (indicative of sleep style evasion)

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process