Managed XDR

vtdl_bnv31izv — отчёт о динамическом анализе вредоносного файла

Информация о файле

Имя файла
vtdl_bnv31izv
Тип файла
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has command line arguments, Icon number=143, Archive, ctime=Sat Dec 23 21:24:40 2023, mtime=Sun Dec 31 00:45:00 2023, atime=Sat Dec 23 21:24:40 2023, length=289792, window=hide
Размер файла
2.2 KB
Первое обнаружение
Последнее обнаружение

Окружение

win7/x86 en

Хеши

SHA1
b73758dfa752f2815866dce1fe5f6e1a48588d40
SHA256
2b4cb0ced7f2266d9fa2646586c3696667d428a7a9ad3d030436451537a66252
MD5
ce11c6e7729614c143f83cf8dd979f6b

Сигнатуры

Execution

T1204 suspicious_lnk: LNK file with suspicious content
T1059.001 suspicious_process: Spawns a suspicious process

Defense Evasion

T1027.004 compiles_code: Compiles C# code

Credential Access

T1056.001 infostealer_keylogger: Keylogger (intercepts keystrokes)

Collection

T1560.001 archive_via_utility: Detected archiving data via utility
T1056.001 infostealer_keylogger: Keylogger (intercepts keystrokes)

Impact

T1531 mahcine_lock: Blocks the workstation

Other

creates_exe: Creates executable files in the file system
unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process
yara_rules: Static rules