Behavioral task
behavioral1
Sample
1cadefcf503d0d345777a2d97ba38423.doc
Resource
win7-20220812-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
1cadefcf503d0d345777a2d97ba38423.doc
Resource
win10v2004-20220812-en
windows10-2004-x64
9 signatures
150 seconds
General
-
Target
1cadefcf503d0d345777a2d97ba38423
-
Size
200KB
-
MD5
1cadefcf503d0d345777a2d97ba38423
-
SHA1
e0d55253c96a19a528d984dd9d806268a6e5cd5d
-
SHA256
70c50594ed2d244a0b04aa3d042c48fe1b471007512cd83bbc90cfeed7906c3b
-
SHA512
3261d6cfb75964d5ac42559d3a1e5dcb4092f3340e1bbd569f25ad8a2a007b536813ffcc066e9291ac0f8699a2a88d58c9e442601e7b72967c25758b3483db45
-
SSDEEP
3072:gLsBRqNRmiNbJSlhPVGkfhEUNVBLqSF7WoPPPBvdZLH1+4j2omS6J:gAiNRtePVHpESVBLhBZ3ldJU4Coe
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
1cadefcf503d0d345777a2d97ba38423.doc windows office2003
ThisDocument
NewMacros