Behavioral task
behavioral1
Sample
Publish3r.doc
Resource
win7-20220812-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Publish3r.doc
Resource
win10v2004-20220812-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
Publish3r.7z
-
Size
9KB
-
MD5
d307940ae702d33b97f925dd5c753de0
-
SHA1
79870fbbeb0e143f4710ba18f99f5ed24c46eaf7
-
SHA256
a91b7bc4a5546ed8e30d320290fc19ce70a9ba0fdf6883108d15d32a8a4cd3aa
-
SHA512
bf5638644aed1cdf355461ac8b741ef1c4e4e539864dd9d7f1dd626a5beb7b0311ba54e8d9c9edd01c3ae86168f4daa49c565158d6cfca67d2f7546a79a40cf6
-
SSDEEP
192:ux1H3CKKnIwmt/NkHOtsINpKLFjt9suxHJriX:uHGn9mtLtsKoFjHbpriX
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/Publish3r.pub office_macro_on_action -
resource static1/unpack001/Publish3r.pub
Files
-
Publish3r.7z.7z
Password: metactf
-
Publish3r.pub.doc .pub windows office2003
ThisDocument
Module1