Managed XDR

vtdl_pa9bkjhd — malware analysis report

File info

Filename
vtdl_pa9bkjhd
File type
MS Windows shortcut, Has Description string, Has command line arguments, Icon number=0, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hidenormalshowminimized
File size
33 MB
First seen
Last seen

Environment

win7/x64 en

Hashes

SHA1
4f069b3c3d4ecf90a7f8a3836ac957dfcd90e944
SHA256
00b6a18a47bdecbf3f97e0a9188e0080a59d87beb4002e8775b036ddee978d37
MD5
cfffb45df8f05d1cb5d9d95fd5a83e9e

Signatures

Execution

T1204 suspicious_lnk: LNK file with suspicious content
T1059.001 suspicious_powershell: Creates suspicious powershell process
T1059.001 suspicious_process: Spawns a suspicious process

Defense Evasion

T1027.002 unnamed_memory_regions: Code was executed in unnamed regions

Other

unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process
yara_rules: Static rules