Managed XDR

r2hk76x.ppt — malware analysis report

File info

Filename
r2hk76x.ppt
File type
Composite Document File V2 Document, Little Endian, Os: MacOS, Version 10.3, Code page: 10000, Title: Optimizers, Last Saved By: Thomas Tylutki, Revision Number: 1, Name of Creating Application: Microsoft Macintosh PowerPoint, Last Saved Time/Date: Wed Jun 13 12:50:58 2012, Number of Pages: 0, Number of Words: 2128, Number of Characters: 0
File size
3.3 MB
First seen
Last seen

Environment

winxp/x86 en

Hashes

SHA1
e13d5c6808f85b38cec964cb3e61a0a38861f4c0
SHA256
eef491cc4f92d727e7bba34049b14d82eb60724133e2c68f682f33c58752286d
MD5
d3cb31ca2acd0add26e4567878b3f9c6

Signatures

Privilege Escalation

T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
office_summary: The document contains suspicious metadata
creates_in_programdata: Creates files in the ProgramData directory