Static task
static1
Behavioral task
behavioral1
Sample
BankSwiftCopyUSD95000.ppt
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
BankSwiftCopyUSD95000.ppt
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
BankSwiftCopyUSD95000.ppt
-
Size
99KB
-
MD5
7f0b415d0b7a76530b2f510a910811e5
-
SHA1
480594ad26c91dd9d719c80334285375540dc83e
-
SHA256
8d3e1d1a1775191a33980069f500e37f22bdcd0a1ad3544ab4a9d0a651fbd019
-
SHA512
d9b3320b51f390a6f75e7e3102044557e6476103c94ec4451819b78b4503f8018fee7ce8f70657473b310b14b752935fac2b7e5caaeb318e09a9af317701d8f4
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource yara_rule sample office_xlm_macros
Files
-
BankSwiftCopyUSD95000.ppt.ppt .pps windows office2003
Module1