Behavioral task
behavioral1
Sample
6d95d8390a00bd979442b73e140597a3.doc
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
6d95d8390a00bd979442b73e140597a3.doc
Resource
win10v2004-20220812-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
6d95d8390a00bd979442b73e140597a3
-
Size
66KB
-
MD5
6d95d8390a00bd979442b73e140597a3
-
SHA1
d9d40019cec3ab37d71d74b9906245fca2ae8069
-
SHA256
f1f6b70c88e1de44ccbed6c70bc332fe315a8edbcf43acab3f8fa7aaaf0cdb0b
-
SHA512
b4956d2da7b5fbb30f58494d838d76a9e5235c7c2e307ef4ced95595222bcd00fb422a788fd351cea265f4559809835ee8630360c4610a40d9428f82156607da
-
SSDEEP
768:bVCI2q6a2ePZ3iHuQHM5yyIJtBaeKrRE:ZCIFb2vHk5sBaeK9
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
6d95d8390a00bd979442b73e140597a3.doc windows office2003
ThisWorkbook
Sheet1
Sheet11
Sheet2
Sheet3
Actual_Macro
Sheet5
Module1
Sheet4
Sheet13
Sheet10
Sheet12
Sheet6
Kangatang