Behavioral task
behavioral1
Sample
PO 000858397, US.doc
Resource
win7-20230220-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
PO 000858397, US.doc
Resource
win10v2004-20230221-en
4 signatures
60 seconds
General
-
Target
2023-3-8-fefdb24d4a4c5190da7402c6122d07c2.bin
-
Size
685KB
-
MD5
fefdb24d4a4c5190da7402c6122d07c2
-
SHA1
d315024d02ff06580f258e8c4594d694166e745f
-
SHA256
5daddc7bcadf07512a83c953035172ce71561fa4a34c3b4a912a27104274bcb1
-
SHA512
ba996f76ad255746f4ce0ec77d00a2407a3350e07a1a05b1e6a3b1a70b0cd9e9d5cfad29da0242b2c69ff537a6a2db07c4f654924b34870a56a0645febe83733
-
SSDEEP
6144:sJNbwmfcuHom8Hz2f//ywiWT8xVTI5wqk:QbPHom8TYyCT8x5I5wF
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/PO 000858397, US.doc office_macro_on_action -
resource static1/unpack001/PO 000858397, US.doc
Files
-
2023-3-8-fefdb24d4a4c5190da7402c6122d07c2.bin.zip
-
PO 000858397, US.doc.doc windows office2003
ThisDocument
Module1