Behavioral task
behavioral1
Sample
Nicht bestätigt 668781.xls
Resource
win7-20220812-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nicht bestätigt 668781.xls
Resource
win10v2004-20220812-en
windows10-2004-x64
9 signatures
150 seconds
General
-
Target
Nicht bestätigt 668781.crdownload
-
Size
136KB
-
MD5
42b4e867c32dac838da681c1a3d8b709
-
SHA1
9e5dcce0f8c9c91ed0d4088d7c81baf103cbb2f3
-
SHA256
b08f0a2abfb1fdef1d37d602fbb2ce69b63c33a58655732ba5a6c3488f827e97
-
SHA512
669b72b81ea18f82c86c7bc39c96729958ba876db7d95f0af02ff0263d60b60e3162be94397bbcf87a86457d7ea5b4eef475ccb616b4aa8e623cb1e1ff21a1ec
-
SSDEEP
3072:/mk3hbdlylKsgqopeJBWhZFGkE+cL2NdAnMPitGv4UL24WE7pI2KLS2Ws1ttEhDd:Ok3hbdlylKsgqopeJBWhZFVE+W2NdAMa
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action
Files
-
Nicht bestätigt 668781.crdownload.xls .crdownload windows office2003