Managed XDR

scratch-zoo-2025-03-05...c39280e4a6a47a4e350ff5 — malware analysis report

File info

Filename
scratch-zoo-2025-03-05-34976cd1a2c39280e4a6a47a4e350ff5
File type
MS Windows shortcut, Item id list present, ctime=Tue Mar 4 13:34:51 2025, mtime=Tue Mar 4 13:34:51 2025, atime=Tue Mar 4 13:34:51 2025, length=0, window=hide
File size
1.1 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
352ce1de9a76cb4cd438788ae45eb65a91b72418
SHA256
e9830fbe831751d2c045c9d5061847ec4b4fa3ac58af0cb0ceca01d7b5408eaa
MD5
34976cd1a2c39280e4a6a47a4e350ff5

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process