Static task
static1
Behavioral task
behavioral1
Sample
8d61ea9ef38b6e7b36f466299223ad43339080d3a9914059c88ca3dd6be5cd32.docx
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8d61ea9ef38b6e7b36f466299223ad43339080d3a9914059c88ca3dd6be5cd32.docx
Resource
win10v2004-20220812-en
General
-
Target
8d61ea9ef38b6e7b36f466299223ad43339080d3a9914059c88ca3dd6be5cd32.zip
-
Size
55KB
-
MD5
78a78a6c690a6148aef699f64f7fe8bf
-
SHA1
997fd941764fb3b670e1abd4f50b7cecbc28976a
-
SHA256
9a8d5e03c0377c94b37bbef88a344e3bf54838419f4ffd842758ca1637a3a17f
-
SHA512
3d5912976305c2eac3191aa072b216e4558442f72346f614c9eebb41276bc1860b6fece9a2414f7372a037de266ee25999a344b608a5ca944e8b11b741993693
-
SSDEEP
1536:8ejPJTpFfrcyIgboIEcXjrJUN7pjifwTJm+U2+CA:8e9pF4yIRwjrJ6k+U9
Malware Config
Extracted
ftp://epiz_32594997:[email protected]/htdocs/a.html
Signatures
-
Office document contains embedded OLE objects 1 IoCs
Detected embedded OLE objects in Office documents.
resource yara_rule static1/unpack001/8d61ea9ef38b6e7b36f466299223ad43339080d3a9914059c88ca3dd6be5cd32 office_ole_embedded
Files
-
8d61ea9ef38b6e7b36f466299223ad43339080d3a9914059c88ca3dd6be5cd32.zip.zip
Password: infected
-
8d61ea9ef38b6e7b36f466299223ad43339080d3a9914059c88ca3dd6be5cd32.docx office2007