Behavioral task
behavioral1
Sample
RCI.doc
Resource
win7-20230220-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
RCI.doc
Resource
win10v2004-20230220-en
4 signatures
60 seconds
General
-
Target
2023-3-8-6b7e429d3565d5e3d26540a7d1a208b3.bin
-
Size
654KB
-
MD5
6b7e429d3565d5e3d26540a7d1a208b3
-
SHA1
6dce24c416431f77d8bbf66fbf4864aa7010d2fd
-
SHA256
966c2ffa4f89653e55a53b60a542cb8e67d15628f7c73489ce3a9b6437962beb
-
SHA512
466d0e6910b9824d14faafded0bed30dfeeb1c428bb7791587b7dd04bc6519acfd0ed12d5b847d78f4a4e5253e0b6087fd8bb9683b5e61b40a72389d336a0b77
-
SSDEEP
3072:x1lsI//z4a/hGS0NclN3U8XKp5ZuoWkQQhl0GEzal3Ca:x12c/z4a5GLNIp1WMkd3tCa
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/RCI.doc office_macro_on_action -
resource static1/unpack001/RCI.doc
Files
-
2023-3-8-6b7e429d3565d5e3d26540a7d1a208b3.bin.zip
-
RCI.doc.doc windows office2003
ThisDocument
Module1