Managed XDR

vtdl_1751878316_qlv5vmqs — malware analysis report

File info

Filename
vtdl_1751878316_qlv5vmqs
File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1200, Locale ID: 2052, Author: wx, Last Saved By: Adminis, Create Time/Date: Fri Dec 2 08:54:00 2016, Last Saved Time/Date: Mon Jul 7 06:36:17 2025, Name of Creating Application: WPS Of, Security: 0
File size
81.5 KB
First seen
Last seen

Environment

winxp/x86 en

Hashes

SHA1
110292d6623e297d5033bf1b6205f65818c5f0bb
SHA256
a6686a36a92f2826da584f0b5cdfc7938d9c081a393cbd30680824bf9639082d
MD5
bfe3b36087e46aa9ed8d76a811865382

Signatures

Execution

T1203 office_exploit_crash: Microsoft Office process crashes (failed exploitation of a vulnerability is possible)
T1064 office_macros: The document contains macroses (total: 3)

Defense Evasion

T1064 office_macros: The document contains macroses (total: 3)

Credential Access

T1555.003 cookie_files: Accesses cookie files
T1552 cookie_files: Accesses cookie files

Other

yara_rules: Static rules
modifies_certs: Attempts to generate or modify system certificates
office_summary: The document contains suspicious metadata
creates_in_programdata: Creates files in the ProgramData directory