Behavioral task
behavioral1
Sample
20e2093192e7b7b96c067cd8f16cee4ccb51e8c10676050646877bc83dc34a27.xls
Resource
win7-20220901-en
17 signatures
150 seconds
General
-
Target
8201416580.zip
-
Size
11KB
-
MD5
2ee150adaac2f3f1a54be70334e01f2a
-
SHA1
c8a9dba69a904b51e89788ddfb1f3322768481e2
-
SHA256
b3d4099396e806114d16399f93161ca945afe4138282083bf3b36de68461337a
-
SHA512
6dbcfc1c8e069fd3dbfc97d036c0ba5c5181516f2f4e28e82abfb606b3e630e8735f849ee18ed869a4b0d9d244c7c08c9cce76ece9f01608a72addcdd987d265
-
SSDEEP
192:8v1lMYHsCAG5FZZPt/h+qcF8VXPQBuPhuuhJycnYUZTZv5My9BXxJnuOhxVEg8hL:8DMDAFZZV/h+qcF8JPpPhuuiyZT153B4
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/20e2093192e7b7b96c067cd8f16cee4ccb51e8c10676050646877bc83dc34a27 office_macro_on_action -
resource static1/unpack001/20e2093192e7b7b96c067cd8f16cee4ccb51e8c10676050646877bc83dc34a27
Files
-
8201416580.zip.zip
Password: infected
-
20e2093192e7b7b96c067cd8f16cee4ccb51e8c10676050646877bc83dc34a27.xls windows office2003
ThisWorkbook
kQeeH