Managed XDR

vtdl_61rs14wy — malware analysis report

File info

Filename
vtdl_61rs14wy
File type
MS Windows shortcut, Item id list present, ctime=Mon Oct 14 06:00:43 2024, mtime=Mon Oct 14 06:00:43 2024, atime=Mon Oct 14 06:00:43 2024, length=0, window=hide
File size
1.1 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
2e81a63222aaa57825fdbe107fd541ace86c5d63
SHA256
f09b6bba8b0168920b3340f26ee328c30cf8f3fbdbb304189464a123d742a021
MD5
1f719f7d32658709878f601bf58b25ec

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process