Managed XDR
Group-IB MDP Report
File info
Filename: az_pass.exe.bin
File Type: PE32 executable (GUI) Intel 80386, for MS Windows
File Size: 143.5 KB
Env info
win7/x86 en
Hashes
SHA1: fa65851004bf3aa48a21fd418f478839d80531d7
SHA256: 327ab944a296004cd6604bda37de5cd135a3e923e4513b762a73b6b5ff18e711
MD5: 622d831102344ddfc06cc497848939b0
Malwares
Lockbit
Signatures
Privilege Escalation
T1134 opens_process_token: Opens the access token associated with a process
Defense Evasion
T1027.002 packer_entropy: Probably contains compressed or encrypted data
T1134 opens_process_token: Opens the access token associated with a process
Other
yara_rules: Static rules
process_crashed: One of the processes has failed
no_graphical_activity: No graphic activity
Managed XDR