Managed XDR

280917082 — отчёт о динамическом анализе вредоносного файла

Информация о файле

Имя файла
280917082
Тип файла
MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has command line arguments, Icon number=3, Archive, ctime=Tue Apr 21 04:22:07 2020, mtime=Tue Apr 21 04:22:07 2020, atime=Tue Apr 21 04:22:07 2020, length=141824, window=hidenormalshowminimized
Размер файла
2.5 KB
Первое обнаружение
Последнее обнаружение

Окружение

win7/x64 en

Хеши

SHA1
0cd46cd73b12b12bee74a554fcee14d1603444b0
SHA256
07e2b838a97a955b84e52ca846eeb83d472c4eda05ea0b8b658be319cc0163c6
MD5
0ad36174c2a30bf0d43ca390544b1335

Сигнатуры

Defense Evasion

T1027.002 unnamed_memory_regions: Code was executed in unnamed regions
T1497.001 antisandbox_script_timer: Detected script timer window (indicative of sleep style evasion)

Discovery

T1497.001 antisandbox_script_timer: Detected script timer window (indicative of sleep style evasion)

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process
message_box: Displays a message