Managed XDR

btest.exe — malware analysis report

File info

Filename
btest.exe
File type
PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
File size
37 KB
First seen
Last seen

Environment

win7/x64 en

Hashes

SHA1
e0fda69c0a0869cd197887366ed9c7220bf8ae33
SHA256
8f6010069dbf27356435bd1da4a174e72e52dd9fe3bc28a96ca20ee15750e4ce
MD5
f88cd23b208a626b3c9006f8dff770c8

Signatures

Privilege Escalation

T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1497.003 antisandbox_sleep: The process attempted to slow down analysis
T1134 opens_process_token: Opens the access token associated with a process

Discovery

T1497.003 antisandbox_sleep: The process attempted to slow down analysis

Other

yara_rules: Static rules