Behavioral task
behavioral1
Sample
15e5fd5da7e0c399d4cc110e8a3de1a0.doc
Resource
win7-20220901-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
15e5fd5da7e0c399d4cc110e8a3de1a0.doc
Resource
win10v2004-20221111-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
15e5fd5da7e0c399d4cc110e8a3de1a0
-
Size
24KB
-
MD5
15e5fd5da7e0c399d4cc110e8a3de1a0
-
SHA1
f95f89cc8e0ed63e849dbe07795eabf6c8d962e5
-
SHA256
9c99f39aa789216d1d1599ecb28c8e6d27b69153392389b12ad9972b9a7f58bd
-
SHA512
098e57c9f0ddc17cd9eb1e3bb657d96e7f30896b328107d0500525d221eec125ca03a9515e15223d33c293373dce6e9ad3b1483a2c77de64966fbe3dc708bd28
-
SSDEEP
384:fhq450jdRCKMK+peg/ikoSPObPjkyzQ/ZA5TPWKsxgT7pf:f3odsKMK+pegqkoKO9WITPVsaT
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action
Files
-
15e5fd5da7e0c399d4cc110e8a3de1a0.doc windows office2003