Managed XDR

tade-usb-32.lnk — malware analysis report

File info

Filename
tade-usb-32.lnk
File type
MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has command line arguments, Icon number=-166, Archive, ctime=Wed May 15 04:18:47 2024, mtime=Mon Oct 7 09:14:49 2024, atime=Wed May 15 04:18:47 2024, length=236544, window=hidenormalshowminimized
File size
1.7 KB
First seen
Last seen

Environment

win7/x64 en

Hashes

SHA1
6fe7a812064f11691f533eefb9bbd791ef9c390e
SHA256
2862bf741f238d52065ba39838dae3e30960562b28bf0c56a6e9fbd9ba401127
MD5
a0f5da0d6a90ddb31640a18c00e7bc5f

Signatures

Execution

T1204 suspicious_lnk: LNK file with suspicious content
T1059 suspicious_cmd_arguments: Cmd.exe uses file as a data source for the standard input stream

Defense Evasion

T1027.002 unnamed_memory_regions: Code was executed in unnamed regions

Other

unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process