Managed XDR

vtdl_z1lvr8nq — malware analysis report

File info

Filename
vtdl_z1lvr8nq
File type
MS Windows shortcut, Item id list present, Has command line arguments, Icon number=3, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hidenormalshowminimized
File size
900 Bytes
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
94c1d3c8877ac98d5c15f07693099d6bb2c92909
SHA256
a4050f5f4f982d033b786083bd56644366fe1d2b5e56422726420fbba676ac15
MD5
ef53efd2bfc9f752f171ee7559fa604b

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process
get_policy_info: Retrieves information about a Policy object