Behavioral task
behavioral1
Sample
PO 2023-03-07_1418, US.doc
Resource
win7-20230220-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
PO 2023-03-07_1418, US.doc
Resource
win10v2004-20230220-en
4 signatures
60 seconds
General
-
Target
2023-3-8-9d9a116efa9b3b18d0167dc1bdf9527b.bin
-
Size
637KB
-
MD5
9d9a116efa9b3b18d0167dc1bdf9527b
-
SHA1
1887c8ffa043f665cca7a7dec66cbb15f1e91f20
-
SHA256
e7bef44a95dc12a3ce320cb8b701f3ddd06e37d8ad02953c3c05fd45425e8b35
-
SHA512
ca10f3565b919835749245ef816f8e2416687f071503fe892b9ba10f8817599e33efbc1ed36e234b6b24aba79a7a34067cb457d6c5060b7220d104010e18877b
-
SSDEEP
3072:01lsI//z4a/hGS0NclN3U8XKp5ZuoWkQQhl0GEzal3C9:012c/z4a5GLNIp1WMkd3tC9
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/PO 2023-03-07_1418, US.doc office_macro_on_action -
resource static1/unpack001/PO 2023-03-07_1418, US.doc
Files
-
2023-3-8-9d9a116efa9b3b18d0167dc1bdf9527b.bin.zip
-
PO 2023-03-07_1418, US.doc.doc windows office2003
ThisDocument
Module1