Managed XDR

vtdl_1762620910_5g8rf1dh (ALPHV) — malware analysis report

File info

Filename
vtdl_1762620910_5g8rf1dh
File type
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
File size
2.2 MB
First seen
Last seen

Environment

w10/x86 en

Hashes

SHA1
b922d6a78d4716bba780b08191c90ec404d51f25
SHA256
4a131bc2de8b128ff9a668c7079d944e102fdaac3c988dbfb6afd6b512b9085d
MD5
f5b08cb55bdbd58b1d344e900f4133a1

Malwares

  • ALPHV

Signatures

Privilege Escalation

T1055 injection_failed: The attempt to inject into a process has failed

Defense Evasion

T1027.002 packer_entropy: Probably contains compressed or encrypted data
T1055 injection_failed: The attempt to inject into a process has failed

Other

yara_rules: Static rules
ce_info: Blackcat Configuration Data found
no_graphical_activity: No graphic activity
writes_data: Writes big amount of data to disk

Related reports

Managed XDR