Managed XDR
Group-IB MDP Report
File info
Filename: vtdl_1744261488_q068ildn
File Type: PE32 executable (GUI) Intel 80386, for MS Windows
File Size: 141.5 KB
Env info
win7/x86 en
Hashes
SHA1: fc5e98e77144790744ad5c3e5010051da5b6f2d4
SHA256: 788ae669055112bf1d63cd923e3e6ab4c8c0c3e5e19f017a8eb22b2a1ac420eb
MD5: 400900a5c20bd207092ec08c725cb686
Malwares
Lockbit
Signatures
Privilege Escalation
T1134 opens_process_token: Opens the access token associated with a process
Defense Evasion
T1027.002 packer_entropy: Probably contains compressed or encrypted data
T1134 opens_process_token: Opens the access token associated with a process
Other
yara_rules: Static rules
process_crashed: One of the processes has failed
no_graphical_activity: No graphic activity
Managed XDR