Static task
static1
Behavioral task
behavioral1
Sample
Reddito/20220923 - FP Cometa_Allegati RED_C_BOZZA_clean.docx
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Reddito/20220923 - FP Cometa_Allegati RED_C_BOZZA_clean.docx
Resource
win10v2004-20220812-en
General
-
Target
Reddito.zip
-
Size
160KB
-
MD5
698b7d9e9670e7d48ba06f1784c518f7
-
SHA1
e0167147beaf64c943e6a958be9c39b65d9de07b
-
SHA256
f1cc1073d146557244eb01f19a0da459f0a1531a1fae2c16303db76a89eb14d2
-
SHA512
a1e40e85804bde80f4aa385651181e8354ae7300852cae21a30f14b554c0dec04b831c8020d2e42bd87af95fc4f6ae228e9aee49ef4397795b288359afa599de
-
SSDEEP
3072:4R7dqsVIwNQHsuifaUQpypcM7ZtEM1QBETaN6XYqeWm19Pi/nbXEdU8:2dqsVpQHsuifpTcMLxEDNSjeWuUbS
Malware Config
Signatures
-
Office document contains embedded OLE objects 2 IoCs
Detected embedded OLE objects in Office documents.
resource yara_rule static1/unpack001/Reddito/20220923 - FP Cometa_Allegati RED_A_BOZZA_clean.docx office_ole_embedded static1/unpack001/Reddito/20220923 - FP Cometa_Allegati RED_C_BOZZA_clean.docx office_ole_embedded
Files
-
Reddito.zip.zip
-
Reddito/20220923 - FP Cometa_Allegati RED_A_BOZZA_clean.docx.docx office2007
-
Reddito/20220923 - FP Cometa_Allegati RED_B_BOZZA_clean.docx.docx office2007
-
Reddito/20220923 - FP Cometa_Allegati RED_C_BOZZA_clean.docx.docx office2007
-
Reddito/20220923 - FP Cometa_Allegati RED_D_BOZZA_clean.docx.docx office2007