Managed XDR

oodaiaoo-1-2-ouy-iui3_-1o-xi-ne-.lnk — malware analysis report

File info

Filename
oodaiaoo-1-2-ouy-iui3_-1o-xi-ne-.lnk
File type
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Jun 25 18:47:43 2024, mtime=Tue Jun 25 18:47:43 2024, atime=Tue Jun 25 18:47:43 2024, length=2543616, window=
File size
2.3 KB
First seen
Last seen

Environment

win7/x64 en

Hashes

SHA1
3dec59844e516b67a10688023a2b366fd5973676
SHA256
860d9942a7798a14a685d0519600f8ad173c271ebd75c947b57b4aa287f1d205
MD5
4ea3f19ddfe50e922067f6f769c6fa60

Signatures

Execution

T1204 suspicious_lnk: LNK file with suspicious content
T1059.001 url_cmdline: Cmdline of process contains URL
T1059.003 url_cmdline: Cmdline of process contains URL

Defense Evasion

T1027.002 unnamed_memory_regions: Code was executed in unnamed regions

Other

create_process_failed: Could not start the process
unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process
yara_rules: Static rules