Managed XDR

369890912 — отчёт о динамическом анализе вредоносного файла

Информация о файле

Имя файла
369890912
Тип файла
MS Windows shortcut, Item id list present, Has Relative path, Has command line arguments, Icon number=200, ctime=Mon Jan 1 00:00:00 1601, mtime=Mon Jan 1 00:00:00 1601, atime=Mon Jan 1 00:00:00 1601, length=0, window=hidenormalshowminimized
Размер файла
1.6 KB
Первое обнаружение
Последнее обнаружение

Окружение

w10/x64 en

Хеши

SHA1
7a244dabf761e8d8fe074239947900d2bdc7751a
SHA256
985eca721164b3568c2f59ed07ee8da6495debf3dcf7ce1ac487064750533161
MD5
24251c76a1a7ad4c234b4fb9a211a374

Сигнатуры

Execution

T1204 suspicious_lnk: LNK file with suspicious content
T1059.001 suspicious_process: Spawns a suspicious process

Defense Evasion

T1497.003 antisandbox_idletime: Detects Windows Idle Time to determine the uptime

Discovery

T1497.003 antisandbox_idletime: Detects Windows Idle Time to determine the uptime
T1518 locates_browser: Attempts to identify where browsers are installed

Other

runs_utility_without_cmdline: Runs system utility without arguments (non-typical usage)
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process
yara_rules: Static rules