Managed XDR

clsid_mycomputer.lnk — malware analysis report

File info

Filename
clsid_mycomputer.lnk
File type
MS Windows shortcut, Item id list present, Points to a file or directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Jan 29 21:05:53 2019, mtime=Wed Jan 30 21:22:57 2019, atime=Tue Jan 29 00:00:35 2019, length=1708016, window=hide
File size
3.1 KB
First seen
Last seen

Environment

win7/x64 en

Hashes

SHA1
2957836de2c595111c2b26799bf3faa6888fb584
SHA256
5ab4ab72d9535a0785cf668a5a4116d14e367c4c6655fa55b2337d9e8a06575a
MD5
4ae7b41da93fb8bfde6bb7ad9c7ca823

Signatures

Execution

T1204 suspicious_lnk: LNK file with suspicious content
T1059.001 url_cmdline: Cmdline of process contains URL
T1059.003 url_cmdline: Cmdline of process contains URL

Defense Evasion

T1027.002 unnamed_memory_regions: Code was executed in unnamed regions

Discovery

T1518 locates_browser: Attempts to identify where browsers are installed

Other

create_process_failed: Could not start the process
unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process
yara_rules: Static rules