Behavioral task
behavioral1
Sample
DOC_IRH_030123_YCJ_030823.doc
Resource
win7-20230220-en
7 signatures
150 seconds
General
-
Target
DOC_IRH_030123_YCJ_030823.zip
-
Size
654KB
-
MD5
056f3dd67f9528ed645bb056563cba03
-
SHA1
ab8e6ddd834fb3af5e6fd788e7c751e43221082f
-
SHA256
9684eefc3cca44d4f3fa2fa973a5508fefa26c02fbe8b5748c85d59829d31adc
-
SHA512
b00780368d02fbd5ed8eb14dbbe25eacaf3406ffbdcdd79837e2f26e6adbf2b337fbfcdd1cf844b66eacb2095d1acef5bb4badb4aefe0b7f4e13cfc41021921a
-
SSDEEP
6144:dJNbwmfcuHom8Hz2f//ywiWT8xVTI5wqV:xbPHom8TYyCT8x5I5wk
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/DOC_IRH_030123_YCJ_030823.doc office_macro_on_action -
resource static1/unpack001/DOC_IRH_030123_YCJ_030823.doc
Files
-
DOC_IRH_030123_YCJ_030823.zip.zip
-
DOC_IRH_030123_YCJ_030823.doc.doc windows office2003
ThisDocument
Module1