Behavioral task
behavioral1
Sample
GF4336499988K.doc
Resource
win7-20230220-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
GF4336499988K.doc
Resource
win10v2004-20230220-en
4 signatures
60 seconds
General
-
Target
2023-3-8-f911e690185495c1c70ac05cd688048e.bin
-
Size
688KB
-
MD5
f911e690185495c1c70ac05cd688048e
-
SHA1
48606fe70b7ec4cb98b2d0c1086f89c8638b78ef
-
SHA256
30767c1908f1927654b72634b6ba0c9897a7d6f0cf53dde8209963c93f3d3681
-
SHA512
3dab5aa65b9932fd8f611b08623bc366b4f46d1a2e5341a1e53db36c1fb41e746f115c143102f2d4852763f5649af8d133e90a7fb3fd208d9a6325cd32921d09
-
SSDEEP
6144:yJNbwmfcuHom8Hz2f//ywiWT8xVTI5wqy:ebPHom8TYyCT8x5I5wd
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/GF4336499988K.doc office_macro_on_action -
resource static1/unpack001/GF4336499988K.doc
Files
-
2023-3-8-f911e690185495c1c70ac05cd688048e.bin.zip
-
GF4336499988K.doc.doc windows office2003
ThisDocument
Module1