Behavioral task
behavioral1
Sample
0e7f25bd875f7ada74d15439c243a403.doc
Resource
win7-20221111-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
0e7f25bd875f7ada74d15439c243a403.doc
Resource
win10v2004-20221111-en
4 signatures
150 seconds
General
-
Target
0e7f25bd875f7ada74d15439c243a403
-
Size
66KB
-
MD5
0e7f25bd875f7ada74d15439c243a403
-
SHA1
441dcc12f977e70e083c4bd6a96c3e1c3ae7c045
-
SHA256
cdfb71d280d6c7bf278f5ddfde9b9b1d501e4d8b2ed5f6dcf5059a438eaf6b48
-
SHA512
eaecc052b5ba7e490bbcf47c7341394ddbe305e539b43b0b93441312c5d557ff0f170cac911bfc7aab75f22ec01cd6fc688bfd6799b69945d667a169fe9d4595
-
SSDEEP
768:bHxFx2l602ePZ3i8kQQyVQfWlBaeKlEE:DnxuJ2v8jQylBaeKl
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
0e7f25bd875f7ada74d15439c243a403.doc windows office2003
ThisWorkbook
Sheet1
Sheet11
Sheet2
Sheet3
Actual_Macro
Sheet5
Module1
Sheet4
Sheet13
Sheet10
Sheet12
Sheet6
Kangatang