Static task
static1
Behavioral task
behavioral1
Sample
something.doc
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
something.doc
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
something.doc
-
Size
943KB
-
MD5
f994697106f7c6cef2f394a9429d9e67
-
SHA1
15252272f8d6911731eef807a49f045ff97a8a46
-
SHA256
3a2a1eff040a79d603b1ac2609a423ad8beb46d2876aa959f60dc98477707c0f
-
SHA512
d1646c3c35da147be80aa425d3ebd07fd05af54c96daef85c1f4e59b450fc8e5bd0774c2c9ebe465aa30cfb74e7a9f1b7203bbbcd36936eb5e56e2e814e04bb4
-
SSDEEP
24576:IFW1KECuoOpbodVYnRI50bl1n19X6cpALHKeZBdQm1Xbd:YECuoQb8Vf5ynfAzpT1Ld
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
something.doc.doc windows office2003
ThisDocument
Module2
Module1