Behavioral task
behavioral1
Sample
POD 32159.doc
Resource
win10v2004-20230220-en
6 signatures
300 seconds
General
-
Target
2023-3-8-31679ac7e1ab1ad74c103a61abb2e7db.bin
-
Size
643KB
-
MD5
31679ac7e1ab1ad74c103a61abb2e7db
-
SHA1
1530cebb66dd08da92a9a1c2c098e5e4a99bf11c
-
SHA256
a649cf12c70e6b225fa6d5c8ca42d01ba638a042c12d8a1d4d64f93c82dc6f47
-
SHA512
2ee61001ea740375db47c2ddf3953be550749f8069b0edda3d4441071a800b9dc9c9cc39b7a508b3749b2b33e6d1b94b078574e1de9ce0954eaaa2b1ab1b9f6c
-
SSDEEP
3072:Z1lsI//z4a/hGS0NclN3U8XKp5ZuoWkQQhl0GEzal3Cb:Z12c/z4a5GLNIp1WMkd3tCb
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/POD 32159.doc office_macro_on_action -
resource static1/unpack001/POD 32159.doc
Files
-
2023-3-8-31679ac7e1ab1ad74c103a61abb2e7db.bin.zip
-
POD 32159.doc.doc windows office2003
ThisDocument
Module1