Managed XDR

vtdl_1730961274_ni_d_oq9 (Tinba) — malware analysis report

File info

Filename
vtdl_1730961274_ni_d_oq9
File type
PE32 executable (console) Intel 80386, for MS Windows
File size
290 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
59d5893fb716021b545d4b101e6aa44c7f5526c9
SHA256
96f8b6acfdaf17cad6c513c7fee9cd59f21741ee74df689ca0b968c0dd577704
MD5
2b83c1e8b892ac38c3d046a31b6ba50f

Malwares

  • Tinba

Signatures

Privilege Escalation

T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules

Related reports