Static task
static1
Behavioral task
behavioral1
Sample
0113_35727287.doc
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
0113_35727287.doc
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
0113_35727287.doc
-
Size
633KB
-
MD5
e688ebdab6916fc89610c89ccb94ce16
-
SHA1
a91447a728148e321fc576c6b55b3e9ba886bb8a
-
SHA256
772c897ffdfb824b31d70ea360224714ab9bb83659bd431897cc74dd2defc2f3
-
SHA512
7ec1f08fff2ae185421ddf6e1089349b1e9a0c0123c75d147b80c5ae0fc18938c2f781fc44d84e8abe0c4e251dbdfe3ea9499087345c39291fa96b9d18a39bf2
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action
Files
-
0113_35727287.doc.doc windows office2003
ThisDocument
Module10
Module12
Module11
Module1