Managed XDR

vtdl_slf6g4lw — malware analysis report

File info

Filename
vtdl_slf6g4lw
File type
MS Windows shortcut, Item id list present, ctime=Wed Sep 18 00:07:11 2024, mtime=Wed Sep 18 00:07:11 2024, atime=Wed Sep 18 00:07:11 2024, length=0, window=hide
File size
1 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
40d2abd2062dfbd13bef97614018d188b93b8717
SHA256
e5670e5304ef734a56a4ee432d436c3ea015d639a9abab2d82e494a9eab6dcd6
MD5
57bf4ce9edbf2c4556a347ec5f9aee5c

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process