Managed XDR

vtdl_vqn_ahjl — отчёт о динамическом анализе вредоносного файла

Информация о файле

Имя файла
vtdl_vqn_ahjl
Тип файла
MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has Working directory, Has command line arguments, Icon number=13, Normal, ctime=Wed Apr 11 23:34:49 2018, mtime=Sat Feb 17 04:58:27 2024, atime=Wed Apr 11 23:34:49 2018, length=232960, window=hidenormal
Размер файла
1.8 KB
Первое обнаружение
Последнее обнаружение

Окружение

win7/x86 en

Хеши

SHA1
7ddd5a446b0698359f702f02348aa476e880231c
SHA256
fe16c02cecb690970a82186264262f2a10a03d35f3f78a0c95d13da94e380e0f
MD5
4d8dae11745e603c2e0b527a48e45caf

Сигнатуры

Execution

T1204 suspicious_lnk: LNK file with suspicious content
T1059.001 url_cmdline: Cmdline of process contains URL
T1059.003 url_cmdline: Cmdline of process contains URL

Defense Evasion

T1218 suspicious_cmdline: Executes a suspicious command

Discovery

T1518 locates_browser: Attempts to identify where browsers are installed

Other

unexpected_exception: Unexpected exception
creates_suspended_process: Creates suspended process
yara_rules: Static rules