Managed XDR

vtdl_1748633796_noohmz8_ — malware analysis report

File info

Filename
vtdl_1748633796_noohmz8_
File type
MS Windows shortcut, Item id list present, ctime=Thu May 29 08:35:47 2025, mtime=Thu May 29 08:35:47 2025, atime=Thu May 29 08:35:47 2025, length=0, window=hide
File size
1 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
d0dd1c525aab2ceb2506472f846eae61435970f0
SHA256
e8c14e57a68b0c787e22dbeafcc751ad3bc868ebea90ca7b7f5aa932794f02c6
MD5
26f6a7cdb12e988c3fd37bcab4396154

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process