Managed XDR

349542473cd431f7f65255ceb7544b70.virus — malware analysis report

File info

Filename
349542473cd431f7f65255ceb7544b70.virus
File type
MS Windows shortcut, Item id list present, ctime=Fri May 10 18:59:15 2024, mtime=Fri May 10 18:59:15 2024, atime=Fri May 10 18:59:15 2024, length=0, window=hide
File size
633 Bytes
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
f2a7d5ef5b157b3905a574e522533ee4ae3454bd
SHA256
bf162831d0f7ff2409ffa8a45535cb65abd8b7b20268e99ce7fa20882fb99ae5
MD5
349542473cd431f7f65255ceb7544b70

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process