Managed XDR

exmtweak.lnk — malware analysis report

File info

Filename
exmtweak.lnk
File type
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Mon Feb 3 00:25:22 2025, mtime=Mon Feb 3 00:25:22 2025, atime=Mon Feb 3 00:25:22 2025, length=339968, window=hidenormalshowminimized
File size
2.5 KB
First seen
Last seen

Environment

win7/x64 en

Hashes

SHA1
c4ea5b3b66f6fa19852068e7aec2b8f9d89168bc
SHA256
130e87802deeae41a29b19d048bd82782edd0e194d68c780fdf8bb112d716e55
MD5
bf9a640c2b4ebeaa709c186a73da3cf8

Signatures

Execution

T1204 suspicious_lnk: LNK file with suspicious content
T1204.002 mimics_extension: Attempts to mimic the file extension

Defense Evasion

T1027.002 unnamed_memory_regions: Code was executed in unnamed regions
T1036 mimics_extension: Attempts to mimic the file extension

Other

unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process
yara_rules: Static rules