Managed XDR

as-ines-0015773.eml — malware analysis report

File info

Filename
as-ines-0015773.eml
File type
SMTP mail, ASCII text, with very long lines
File size
30.1 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
dac524b61a1b211f0d00e65be669e12ed451174e
SHA256
0dd5a95f10eff930a61e55fbe5fd25ec18b7b989be55b41ea9051356731b6960
MD5
81f190a7887a03ace30523152dbf9658

Signatures

Privilege Escalation

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
pdf_page: Contains only one page
get_policy_info: Retrieves information about a Policy object