Managed XDR

vtdl_7vl4ygtd (Tinba) — malware analysis report

File info

Filename
vtdl_7vl4ygtd
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
File size
468 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
1e5b3371fa083532b902751ba50fb6cbe8d220e5
SHA256
41c6e298594b33dcb954c0c91562a2bcd4f5b923190acd02b5a401a7e7feb39e
MD5
ce6e5671e733f8de75b5e5e9c0062428

Malwares

  • Tinba

Signatures

Persistence

T1574 dropper_dll: Creates DLL, which is then loaded into the process

Privilege Escalation

T1574 dropper_dll: Creates DLL, which is then loaded into the process

Defense Evasion

T1027.002 packer_entropy: Probably contains compressed or encrypted data
T1574 dropper_dll: Creates DLL, which is then loaded into the process

Other

yara_rules: Static rules
message_box: Displays a message

Related reports