Managed XDR

vtdl_gw700ssn — malware analysis report

File info

Filename
vtdl_gw700ssn
File type
MS Windows shortcut, Item id list present, Has Relative path, Has command line arguments, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hidenormalshowminimized
File size
1 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
cf61933b0f39f0acc07c376daaadbfb9827b5523
SHA256
dbcf4a0ea2de3da25e59f49341020fab384a680844a10d589193bb6784ab13d2
MD5
6cb0403a35ddca43dcd53fd6c9709b0a

Signatures

Execution

T1059.007 mshta_javascript: Runs JavaScript using mshta
T1059.003 suspicious_process: Spawns a suspicious process

Credential Access

T1555.003 cookie_files: Accesses cookie files
T1552 cookie_files: Accesses cookie files

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process