Managed XDR

vtdl_1750478681_ewt5iw0x — malware analysis report

File info

Filename
vtdl_1750478681_ewt5iw0x
File type
MS Windows shortcut, Item id list present, ctime=Tue Aug 20 11:21:53 2013, mtime=Tue Aug 20 11:21:53 2013, atime=Tue Aug 20 11:21:53 2013, length=0, window=hide
File size
1 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
50a59ec8e72fbaaa3b28cd66a5a86e1384dbb938
SHA256
adda1ffa1dbff29c1499e95876c02e68d925ad1d3a2a17410b0bb36536056a45
MD5
15df51ee2285b699a2583bd194b44c8a

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process