Managed XDR

c-users-user-appdata-l...a9ef-fb7c64693628-.tmp — malware analysis report

File info

Filename
c-users-user-appdata-local-microsoft-windows-inetcache-content.word-wrf-de014fda-6a53-4885-a9ef-fb7c64693628-.tmp
File type
Composite Document File V2 Document, Cannot read section info
File size
48 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
d803286ba0d0f3697621f8d08379d416882a035c
SHA256
9344cf129fc1b0e670d725342f037a33cec2ac69baa6252b9da5d9365b1bd00d
MD5
22ac198760548334cf986aaca771257b

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
no_graphical_activity: No graphic activity
message_box: Displays a message