Managed XDR

vtdl_1732038293_zijtucat — malware analysis report

File info

Filename
vtdl_1732038293_zijtucat
File type
MS Windows shortcut, Item id list present, ctime=Fri Sep 13 07:01:05 2024, mtime=Fri Sep 13 07:01:05 2024, atime=Fri Sep 13 07:01:05 2024, length=0, window=hide
File size
1 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
c379871ad4d08edeee68e18ab8d0fb7cf3e07033
SHA256
cd2af312a19c7f5846a1860e9d6003b9cd126fb4a5502d09b9e819918b8741e9
MD5
9ddbb6316eef13decece8da68fa5e95c

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process