Managed XDR

vtdl_84vt_kcj — malware analysis report

File info

Filename
vtdl_84vt_kcj
File type
SMTP mail, ASCII text, with very long lines
File size
30.2 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
cc54ff1cdcbeada31f8cb7ea2c4e9e831b0cf4dc
SHA256
8930325fed25c15fbc2a4e3cea58bf29927b789b3f8b012b7a6d21cd54d9e32b
MD5
f2be04930bb30c52612a43d400d173e3

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
pdf_page: Contains only one page
get_policy_info: Retrieves information about a Policy object