Managed XDR

licence.lnk — malware analysis report

File info

Filename
licence.lnk
File type
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has command line arguments, Icon number=44, Archive, ctime=Fri Dec 1 19:04:45 2023, mtime=Tue Apr 2 21:05:30 2024, atime=Fri Dec 1 19:04:45 2023, length=289792, window=hidenormalshowminimized
File size
1.5 KB
First seen
Last seen

Environment

win7/x64 en

Hashes

SHA1
7f6236228441508fe185bc0e46d1a6d3d80bd2d8
SHA256
8c2fa48ec7d15d5aca6dd6b8f9ad2bd931eff0b1846d5f87fb629f3de7c4e1f5
MD5
0f701ed87777d37e16d00582fecb8380

Signatures

Execution

T1204 suspicious_lnk: LNK file with suspicious content
T1059 suspicious_cmd_arguments: Cmd.exe uses file as a data source for the standard input stream

Defense Evasion

T1027.002 unnamed_memory_regions: Code was executed in unnamed regions

Other

unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process
yara_rules: Static rules