Managed XDR

vtdl_96njkip1 — отчёт о динамическом анализе вредоносного файла

Информация о файле

Имя файла
vtdl_96njkip1
Тип файла
MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has Working directory, Has command line arguments, Icon number=13, Normal, ctime=Wed Apr 11 23:34:49 2018, mtime=Sat Feb 17 05:06:24 2024, atime=Wed Apr 11 23:34:49 2018, length=232960, window=hidenormal
Размер файла
1.8 KB
Первое обнаружение
Последнее обнаружение

Окружение

win7/x86 en

Хеши

SHA1
da43b8913e60b29b807c994dba770fe462c2115b
SHA256
ba2fe881faa2741c1787dee66aace1f04503b360fbbc2f489d88149f137fbae7
MD5
5f9ffec96142d9051016024dda7a1a6b

Сигнатуры

Execution

T1204 suspicious_lnk: LNK file with suspicious content
T1059.001 url_cmdline: Cmdline of process contains URL
T1059.003 url_cmdline: Cmdline of process contains URL

Defense Evasion

T1218 suspicious_cmdline: Executes a suspicious command

Discovery

T1518 locates_browser: Attempts to identify where browsers are installed

Other

unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process
yara_rules: Static rules