Managed XDR

c-users-user-appdata-l...ti0ztwjl.xkn-heros.exe — malware analysis report

File info

Filename
c-users-user-appdata-local-temp-ti0ztwjl.xkn-heros.exe
File type
PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
File size
649.5 KB
First seen
Last seen

Environment

win7/x64 en

Hashes

SHA1
11bb29d121965b8d04a7d67a2335f5b102e7831c
SHA256
35d8eb3a18f55806333f187f295df747150048c5cdd011acba9e294fa57ad991
MD5
46c5ea7334b9a227842709f3213309bc

Signatures

Privilege Escalation

T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
no_graphical_activity: No graphic activity