Behavioral task
behavioral1
Sample
RCI.doc
Resource
win7-20230220-en
5 signatures
60 seconds
General
-
Target
2023-3-8-1f1b94f195dbbee586ab7b3970b339d3.bin
-
Size
662KB
-
MD5
1f1b94f195dbbee586ab7b3970b339d3
-
SHA1
2b73492bb836dd78f8a41cc3ee18aa778a7f9868
-
SHA256
caf07beff383f1a8b9d783a49f75fd7e18aa037c287bcbb293c908632e116d1c
-
SHA512
d18a4b9ab69d4f660939e540ee5007a598461cfd2bebddf94ee2651cdf16f838a0120c916712ae1199d1e4cd0e7c77b3ad966eccccaea3f7f978953eb352017e
-
SSDEEP
3072:W1lsI//z4a/hGS0NclN3U8XKp5ZuoWkQQhl0GEzal3CE:W12c/z4a5GLNIp1WMkd3tCE
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/RCI.doc office_macro_on_action -
resource static1/unpack001/RCI.doc
Files
-
2023-3-8-1f1b94f195dbbee586ab7b3970b339d3.bin.zip
-
RCI.doc.doc windows office2003
ThisDocument
Module1