Behavioral task
behavioral1
Sample
20230308_39362_0012.doc
Resource
win7-20230220-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
20230308_39362_0012.doc
Resource
win10v2004-20230221-en
12 signatures
150 seconds
General
-
Target
Customs.gov_20230308_228971_009.zip
-
Size
681KB
-
MD5
42e40bddd73a8c51ed06f7de5fc8b7b7
-
SHA1
a7ee43737eab8051f5f009391e78949ca0cb13bc
-
SHA256
e3d5e99a687406b4f3b801879d5d8dec914a5a3a1c9306d36692f30b5a903156
-
SHA512
ffc2381e58beb7b9099343a1a186c165a197ebee81456a05e55b8a2695af25788efbc3893c7b9736bcd91979c9e842b7e0f374c4ec625ba762e3ce6555ac4f54
-
SSDEEP
6144:6JNbwmfcuHom8Hz2f//ywiWT8xVTI5wqL:mbPHom8TYyCT8x5I5ww
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/20230308_39362_0012.doc office_macro_on_action -
resource static1/unpack001/20230308_39362_0012.doc
Files
-
Customs.gov_20230308_228971_009.zip.zip
-
20230308_39362_0012.doc.doc windows office2003
ThisDocument
Module1