Managed XDR

vtdl_no6ynt_a — malware analysis report

File info

Filename
vtdl_no6ynt_a
File type
SMTP mail, ASCII text, with very long lines
File size
67.3 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
a77f138234b958632abd01e19413586889354223
SHA256
f43a3540aea2d4d24206e9e84c4f1eebca183740475688a24be6ede1a09b0d69
MD5
624d87acb348c610dfd9ffbb6ee2b11e

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
pdf_page: Contains only one page
get_policy_info: Retrieves information about a Policy object