Managed XDR
Group-IB MDP Report
File info
Filename: vtdl_1744258353_odj3r2f1
File Type: PE32 executable (GUI) Intel 80386, for MS Windows
File Size: 143 KB
Env info
win7/x86 en
Hashes
SHA1: 7c2f80b02467e6705c57494890b1a9b21453a305
SHA256: 654567e073ccd81c7fcb91e2c8abe07b66d281316b26b64fa3a2c8b848d2c7fd
MD5: 3b135661d2315a5451b1e0f3bb394602
Malwares
Lockbit
Signatures
Privilege Escalation
T1134 opens_process_token: Opens the access token associated with a process
Defense Evasion
T1027.002 packer_entropy: Probably contains compressed or encrypted data
T1134 opens_process_token: Opens the access token associated with a process
Other
yara_rules: Static rules
process_crashed: One of the processes has failed
no_graphical_activity: No graphic activity
Managed XDR