Behavioral task
behavioral1
Sample
LI3436261488367084LF.doc
Resource
win7-20230220-en
12 signatures
150 seconds
General
-
Target
E-solutionsinc_LI3436261488367084LF.zip
-
Size
661KB
-
MD5
eb33c7c03ea9b1e8456674f8a2ce54f7
-
SHA1
a4c344c9cac342ce471d11336c6bc71d44a24b14
-
SHA256
dbbbf5a97194ab3198d74afd9f50df67440421ecde766c29e7f80d481b1167b3
-
SHA512
4f96f4f86a9d39e0f56b34106443af235a01c46116dbd50646ab08cbfad9300622aafd3d05bb045682e968775de8652c29711f834573c4c26d54a2261cf8802c
-
SSDEEP
6144:DJNbwmfcuHom8Hz2f//ywiWT8xVTI5wqB:XbPHom8TYyCT8x5I5w+
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/LI3436261488367084LF.doc office_macro_on_action -
resource static1/unpack001/LI3436261488367084LF.doc
Files
-
E-solutionsinc_LI3436261488367084LF.zip.zip
-
LI3436261488367084LF.doc.doc windows office2003
ThisDocument
Module1