Resubmissions
07/03/2023, 16:54
230307-ven98aah53 807/03/2023, 16:52
230307-vdedmaac3t 807/03/2023, 16:49
230307-vbt2asah42 1007/03/2023, 16:45
230307-t9j4baac2s 1007/03/2023, 16:36
230307-t4bjzsag89 807/03/2023, 16:35
230307-t3whrsag85 1007/03/2023, 16:31
230307-t1nedaag77 807/03/2023, 16:23
230307-tvym6aag59 8Behavioral task
behavioral1
Sample
K-1 03.07.2023.doc
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
K-1 03.07.2023.doc
Resource
win10v2004-20230220-en
General
-
Target
2023-3-8-6c70429f83d601d3f638e1120dece60b.bin
-
Size
642KB
-
MD5
6c70429f83d601d3f638e1120dece60b
-
SHA1
1a2062306fd22744095f6aab0f6365b5dd351b96
-
SHA256
a2496abb4d61139fbc9e869afe76e3c59e85c6b140aff08e99ed815111738959
-
SHA512
e09b94d0992c9e15bde67f7449c19675481aff15ea8afc8a7e8a196edd9a3a1c22bf3610f365f428b8d0bceccfc743f1658e4e889a95f0c8c093ac09e07ac2c4
-
SSDEEP
3072:j1lsI//z4a/hGS0NclN3U8XKp5ZuoWkQQhl0GEzal3CJ:j12c/z4a5GLNIp1WMkd3tCJ
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/K-1 03.07.2023.doc office_macro_on_action -
resource static1/unpack001/K-1 03.07.2023.doc
Files
-
2023-3-8-6c70429f83d601d3f638e1120dece60b.bin.zip
-
K-1 03.07.2023.doc.doc windows office2003
ThisDocument
Module1