Managed XDR

d-work-case-241203_nan...3a34c2e37abc883dee.dll (Egregor) — malware analysis report

File info

Filename
d-work-case-241203_nan-chang-save_malware_samples_to_disk1203-save_malware_samples_to_disk-967422de1acc14deb7e7ce803d86aff44e2652bfcd550e3a34c2e37abc883dee.dll
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
File size
705.5 KB
First seen
Last seen

Environment

w10/x86 en

Hashes

SHA1
e0caae0804957c5e31c53dd320ca83a5465169c9
SHA256
967422de1acc14deb7e7ce803d86aff44e2652bfcd550e3a34c2e37abc883dee
MD5
627c2219a80245a25e4fe9843ac2a021

Malwares

  • Egregor

Signatures

Privilege Escalation

T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
no_graphical_activity: No graphic activity
has_pdb: This executable file has a PDB path
writes_data: Writes big amount of data to disk

Related reports

Managed XDR