Managed XDR

vtdl_kqx2guf8 — malware analysis report

File info

Filename
vtdl_kqx2guf8
File type
MS Windows shortcut, Item id list present, ctime=Fri Aug 30 11:21:02 2019, mtime=Fri Aug 30 11:21:02 2019, atime=Fri Aug 30 11:21:02 2019, length=0, window=hide
File size
657 Bytes
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
081f37b5e41b80ffa8c126df7821ccf092e98e70
SHA256
251920122c4299a5aa8d6531194959be677579a236ff77697bd7f5505534b031
MD5
0a0f6502bde6fa70cbff1735565f8246

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process