Behavioral task
behavioral1
Sample
2e70715e9fe914ea4477d7a3a908bdab.doc
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2e70715e9fe914ea4477d7a3a908bdab.doc
Resource
win10v2004-20221111-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
2e70715e9fe914ea4477d7a3a908bdab
-
Size
9KB
-
MD5
2e70715e9fe914ea4477d7a3a908bdab
-
SHA1
08dbecb426f4b0a4ae6897d107bc70a4d27fa42a
-
SHA256
36a332d55b32609b9d7126e07e2324386856477c602d99941d76a3f958a21802
-
SHA512
94bf572486d99bce71176f955b4f431658ebcff0817264b0b02a3f6d1810ae1a104dd6ecbbfe1d835e9935de2a95923fb1aa4ae203f401e8d804b4f996105723
-
SSDEEP
96:V4T8ZUtuE0BbcEQsjA6/l1vu+X0jBvA2jttgMtx5uImY1aovaaQQixd:V4TR8tlQ8AM50jmO5ttDqaQf
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
2e70715e9fe914ea4477d7a3a908bdab.doc windows office2003
ThisDocument
NewMacros