Managed XDR

vtdl_1748737878_cljmitsj — malware analysis report

File info

Filename
vtdl_1748737878_cljmitsj
File type
MS Windows shortcut, Item id list present, Points to a file or directory, Has command line arguments, Icon number=3, Archive, ctime=Mon Jul 15 03:28:39 2024, mtime=Thu May 15 13:38:17 2025, atime=Mon Jul 15 03:28:39 2024, length=89600, window=hide
File size
1.7 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
f429c1b63cbd4ee56efb2293aff87bf48a7317e9
SHA256
4d2da1e2b51f6e3ffa50f9c703b37080a806a5b01f3a627e6b7cb9bdb037efc9
MD5
31667be80d2be0fb5bf58a7f97c462db

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Discovery

T1518 locates_browser: Attempts to identify where browsers are installed

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process
message_box: Displays a message
get_policy_info: Retrieves information about a Policy object