Behavioral task
behavioral1
Sample
truc_mechant.doc
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
truc_mechant.doc
Resource
win10v2004-20230220-en
5 signatures
150 seconds
General
-
Target
truc_mechant.zip
-
Size
303KB
-
MD5
eef0f3d7c6f48ab6a5c1a774886caf91
-
SHA1
522c94d89ee1c2d95e096ce58c7df5d7729b1bdf
-
SHA256
1b3d9c02cb1d27bf4e3f6cf9d648f8ff3316f4fd49eac6315ecbcc7358d3579a
-
SHA512
0ba569dae6b2fd88f23d1a73e0e0c8681bb49a6142a7d3dbd12a7554c2c29895aa40ec160b6fc829bf5c03c485ff96d66e34b14a5729dad68fa06494e4549597
-
SSDEEP
6144:pyjWPTvm1vy85gYS40db4ODDIjxWNKess+tepFyE8xYBOMe/IZJyJTmWb:WWbveaEgYS40db4ODkjkwess+tePyE8r
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/truc_mechant.doc office_macro_on_action
Files
-
truc_mechant.zip.zip
Password: infected
-
truc_mechant.doc.doc windows office2003