Managed XDR

btest.exe — malware analysis report

File info

Filename
btest.exe
File type
PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
File size
37 KB
First seen
Last seen

Environment

win7/x64 en

Hashes

SHA1
c91c98dd5e8ff4989eb02bd83416ae38274ed1b6
SHA256
2a9736d323251bc4a30a18cf7f4373c5c138d52fa387e51cb47cfb8bb837e952
MD5
dd19f2cc695c9fd2ace80d22c49ae77f

Signatures

Privilege Escalation

T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1497.003 antisandbox_sleep: The process attempted to slow down analysis
T1134 opens_process_token: Opens the access token associated with a process

Discovery

T1497.003 antisandbox_sleep: The process attempted to slow down analysis

Other

yara_rules: Static rules