Static task
static1
Behavioral task
behavioral1
Sample
8d61ea9ef38b6e7b36f466299223ad43339080d3a9914059c88ca3dd6be5cd32.docx
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8d61ea9ef38b6e7b36f466299223ad43339080d3a9914059c88ca3dd6be5cd32.docx
Resource
win10v2004-20220901-en
General
-
Target
220915-jkb2asgacl_pw_infected.zip
-
Size
57KB
-
MD5
cf90650a9e759cd858bffec3be6a60c5
-
SHA1
4a594ae094963d73a0c1c578c6ec197bf1e3d300
-
SHA256
1113c5a60ba15ffd2752293f8653c7e5fa4d73892a5560e5defae2a59cd8dfba
-
SHA512
373add8ef8aff8557855eddc4f0c7749c49b902c82a64fff8fadc0843bc8c37881dbc184fb5caffd376650b3021e497b3e20e6ff7bc35a6dc89382ac417a3fc5
-
SSDEEP
1536:inEQsFlGYbZ4MPYyev5IrLLra+mfDRaJyXrLqapW/ZUZT:iEQsr1Z4MPLeirLLrYBrL5w/OZT
Malware Config
Extracted
ftp://epiz_32594997:[email protected]/htdocs/a.html
Signatures
-
Office document contains embedded OLE objects 1 IoCs
Detected embedded OLE objects in Office documents.
resource yara_rule static1/unpack001/8d61ea9ef38b6e7b36f466299223ad43339080d3a9914059c88ca3dd6be5cd32 office_ole_embedded
Files
-
220915-jkb2asgacl_pw_infected.zip.zip
Password: infected
-
8d61ea9ef38b6e7b36f466299223ad43339080d3a9914059c88ca3dd6be5cd32.docx office2007