Managed XDR

media-daniel-ssd2-data...5aa8cd81f27f980310b9a5 — malware analysis report

File info

Filename
media-daniel-ssd2-datasets-bodmas-virustotal-executables-amber-benign-4c1c659db684d031bfd3551e181e2b4494178ea7e15aa8cd81f27f980310b9a5
File type
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
File size
363 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
8fa61c243af8bee41b91c6067d930429c770aefa
SHA256
14cb36f361b1b3f1c4c27aafa36e5035ac67e8dd7c59ea88393f19f87875d345
MD5
3c9089a6f0386be06c1af6fbab58be61

Signatures

Privilege Escalation

T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1027.002 pe_features: Executable file has PE anomalies (may be false positive)
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
process_crashed: One of the processes has failed
no_graphical_activity: No graphic activity