Behavioral task
behavioral1
Sample
PO#202280894645&637.pps
Resource
win7-20220718-en
windows7-x64
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO#202280894645&637.pps
Resource
win10v2004-20220721-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
PO#202280894645&637.ppa
-
Size
88KB
-
MD5
e66f47a0d1972d2bc0c63a66f0a7313f
-
SHA1
0957f530dafc189bd8f225e766df0af824b0d490
-
SHA256
d4a17c3071447cee6d6ad443c53ce575af8820533c7c1ede02793bdec211253f
-
SHA512
d11312fe3bb0c750fa236487fb82cd6803c3e49921192afa9ea25bc640693aba7533afb95955ecfbed0898f4c16dd3fc299bfe9f143c58a87a57c576cffdec41
-
SSDEEP
768:N/4+Q6xC8ynH5j9bQmF8yEv7MHElPLNt3Kcjo:R4HWC1ZJlF8yEvt1Dm
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action
Files
-
PO#202280894645&637.ppa.pps .ppa windows office2003