Managed XDR

vtdl_1732037857_8csaoevi — malware analysis report

File info

Filename
vtdl_1732037857_8csaoevi
File type
MS Windows shortcut, Item id list present, ctime=Tue May 24 19:43:36 2011, mtime=Tue May 24 19:43:36 2011, atime=Tue May 24 19:43:36 2011, length=0, window=hide
File size
1 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
591fe1a829d5d6f2eca45a889fe67cf8b23a3ec4
SHA256
11fea3e68c40c39f41d9ffd19349a0b46ba938d25dad757a4b8282f20d2e8d07
MD5
6c5266bb98726873acd742eb913ff8e8

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process