Managed XDR

vtdl_1730594668_3ot549hr — malware analysis report

File info

Filename
vtdl_1730594668_3ot549hr
File type
MS Windows shortcut, Item id list present, ctime=Thu Oct 31 12:10:34 2024, mtime=Thu Oct 31 12:10:34 2024, atime=Thu Oct 31 12:10:34 2024, length=0, window=hide
File size
1.1 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
e12f1ae8a9744c3ae7900d17283e6acd1889cdaa
SHA256
ace5574842c7d1c8afa2e82255c9935801f3a5f891730fd4505a388893c16369
MD5
62c864b0e78cdaa83e9c4a2c01985e9b

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process