Managed XDR

g-extract-2021-samples...aadfd0229e1ede1a10.vir — malware analysis report

File info

Filename
g-extract-2021-samples-exe32-virussign.com_0960438bf95a98aadfd0229e1ede1a10.vir
File type
PE32 executable (GUI) Intel 80386, for MS Windows
File size
353 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
c329e2ea1e23900e5c8f7e73fdc029511ed09416
SHA256
95cc0214c983f770dd62ca900fdd9fca46842570f4deda45339da1c854c222ad
MD5
0960438bf95a98aadfd0229e1ede1a10

Signatures

Privilege Escalation

T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
no_graphical_activity: No graphic activity