Behavioral task
behavioral1
Sample
XV65481580159935LBR.doc
Resource
win7-20230220-en
6 signatures
150 seconds
General
-
Target
XV65481580159935LBR.zip
-
Size
657KB
-
MD5
9aefedf59d69edf4e30f9421d9995137
-
SHA1
cc579f7a67e4c5574e2cecf4c6c8f6db3d30a3a0
-
SHA256
b861ad12fa3083a91ab1a3937077f3c7973efafbe645ad48f7b041a46eb83e06
-
SHA512
0f0bfd7ac939e87db592e2f37be6aad7041d3ce4300724556ccca06625c478742a11ad5cf03d96925e0f86fd29d36d1f3a33e9ff8c3a521b84dfe8affa95e203
-
SSDEEP
3072:61lsI//z4a/hGS0NclN3U8XKp5ZuoWkQQhl0GEzal3CB:612c/z4a5GLNIp1WMkd3tCB
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/XV65481580159935LBR.doc office_macro_on_action -
resource static1/unpack001/XV65481580159935LBR.doc
Files
-
XV65481580159935LBR.zip.zip
-
XV65481580159935LBR.doc.doc windows office2003
ThisDocument
Module1