Managed XDR

e91c26cbfe6789b6ee1b6600c443d262.virus — malware analysis report

File info

Filename
e91c26cbfe6789b6ee1b6600c443d262.virus
File type
MS Windows shortcut, Item id list present, Points to a file or directory, Has command line arguments, Icon number=20, Archive, ctime=Wed Jan 12 14:54:22 2022, mtime=Wed Nov 16 12:45:33 2022, atime=Wed Jan 12 14:54:22 2022, length=170496, window=hide
File size
1.7 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
80cf18bfbc757f2da2a65e483c52699be47b6e57
SHA256
d17c4ed49c13ba877d3f0d4762155be49074548e4feab7a5705e8632d17b3d88
MD5
e91c26cbfe6789b6ee1b6600c443d262

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1497.001 antisandbox_script_timer: Detected script timer window (indicative of sleep style evasion)
T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Discovery

T1497.001 antisandbox_script_timer: Detected script timer window (indicative of sleep style evasion)

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process
get_policy_info: Retrieves information about a Policy object