Static task
static1
Behavioral task
behavioral1
Sample
d28398402e0b64cfb6e1f8e28cc21584eddd159690c2dab80aafae9c79201ae0.docx
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d28398402e0b64cfb6e1f8e28cc21584eddd159690c2dab80aafae9c79201ae0.docx
Resource
win10v2004-20220812-en
General
-
Target
d28398402e0b64cfb6e1f8e28cc21584eddd159690c2dab80aafae9c79201ae0.zip
-
Size
97KB
-
MD5
19004fbc55d02156106cac6efa166eec
-
SHA1
95783afeee923908fbd7737e96bfb8dad28f7398
-
SHA256
b00dc9ffe3237ee8a5f55591d5234bee7639d2d450e5a890da09d86647959a12
-
SHA512
ef7c72df96bc2265d0760755b41b8bfd99b08d8a6ebdc401a030178fcf8bfb2b7ee2003d66c213828e7bfde2c30ebda8662b668cbbcc958aa0bd0c4c6caa1927
-
SSDEEP
1536:FtnaszNHRhNXTSGytp7yROj+CHWAB3Sn0g/tC8OL9HnAqk:FYMNHFTBytRBDH99MXOLJk
Malware Config
Extracted
ftp://epiz_32622638:[email protected]/wwwwwwwwwwwwwwwwwwww/smartscreen.html
Signatures
-
Office document contains embedded OLE objects 1 IoCs
Detected embedded OLE objects in Office documents.
resource yara_rule static1/unpack001/d28398402e0b64cfb6e1f8e28cc21584eddd159690c2dab80aafae9c79201ae0 office_ole_embedded
Files
-
d28398402e0b64cfb6e1f8e28cc21584eddd159690c2dab80aafae9c79201ae0.zip.zip
Password: infected
-
d28398402e0b64cfb6e1f8e28cc21584eddd159690c2dab80aafae9c79201ae0.docx office2007