Managed XDR

vtdl_1743721700_gdhqcxzl — malware analysis report

File info

Filename
vtdl_1743721700_gdhqcxzl
File type
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
File size
1.1 MB
First seen
Last seen

Environment

w10/x86 en

Hashes

SHA1
4f13a2553746c91e851d4908a0efe7192f38dd41
SHA256
e844d61d448ddc16b76a700c47037ff791b7fd9a1657e5ef6d62b853be0bfc44
MD5
867f1e140a44543e47559f3d0c863d43

Signatures

Privilege Escalation

T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
dead_host: Connects to IP addresses that do not respond to requests