Managed XDR

vtdl_1yc7vp81 (Egregor) — malware analysis report

File info

Filename
vtdl_1yc7vp81
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
File size
768 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
901cee60fba225baf80c976b10dfa1684a73f5ee
SHA256
af538ab1b8bdfbf5b7f1548d72c0d042eb14d0011d796cab266f0671720abb4d
MD5
b196bc4d3bea5b7922b98d9ba9eb8e2b

Malwares

  • Egregor

Signatures

Defense Evasion

T1027.001 static_overlay_padding: Overlay contents padding

Other

yara_rules: Static rules
no_graphical_activity: No graphic activity
has_pdb: This executable file has a PDB path
message_box: Displays a message
pe_overlay: PE file contains overlay

Related reports