Managed XDR

vtdl_a96vo92c — malware analysis report

File info

Filename
vtdl_a96vo92c
File type
MS Windows shortcut, Item id list present, ctime=Thu Oct 10 06:47:15 2024, mtime=Thu Oct 10 06:47:15 2024, atime=Thu Oct 10 06:47:15 2024, length=0, window=hide
File size
1.1 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
cc7be47aa39c9ec4bb8610e0a6377ce78f290268
SHA256
598ea9b57ce0c311ba0595b0710838faea8c936c8261522d1ca2556e1a2bdf66
MD5
561448d11004f2a6421794b1f973d33b

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process