Managed XDR

test.lnk — malware analysis report

File info

Filename
test.lnk
File type
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Archive, ctime=Tue Mar 12 13:46:06 2024, mtime=Mon May 27 14:07:12 2024, atime=Tue Mar 12 13:46:06 2024, length=289792, window=hide
File size
1.5 KB
First seen
Last seen

Environment

win7/x64 en

Hashes

SHA1
9567b996a9421e14f321acf984b099206d8830f8
SHA256
4742b312ee911d505ddc80ae02a1422be72b26f69346ff3380d494371f4c59e9
MD5
3f081c8ce8dcc9d23c4409ab5cf22abf

Signatures

Execution

T1204 suspicious_lnk: LNK file with suspicious content

Defense Evasion

T1027.002 unnamed_memory_regions: Code was executed in unnamed regions
T1140 unpacking_utilities: Uses Windows utilities to unpack data

Other

creates_in_windows: Creates files in the Windows directory
unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process
yara_rules: Static rules