Behavioral task
behavioral1
Sample
doc_PO_03082023EX.doc
Resource
win7-20230220-en
12 signatures
150 seconds
General
-
Target
doc_PO_03082023EX.zip
-
Size
698KB
-
MD5
c18539ac52358b377956b73f25eaaff7
-
SHA1
ad493600b6ddf2e5792cea297cd6f9357b4d0a4d
-
SHA256
a6460c879d093cb0d71e64bdff461563be46cc1c036cab29b0fdbf58c976c7dc
-
SHA512
15bb89f9ec2a72a6e84b37e909e9410c344ab36f10066e739c43b258e4eaa001dfe029951ece216bdf0b95c09dab18439dfec070a0dcf768676c3839c6749e76
-
SSDEEP
6144:aJNbwmfcuHom8Hz2f//ywiWT8xVTI5wqz:GbPHom8TYyCT8x5I5wc
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/doc_PO_03082023EX.doc office_macro_on_action -
resource static1/unpack001/doc_PO_03082023EX.doc
Files
-
doc_PO_03082023EX.zip.zip
-
doc_PO_03082023EX.doc.doc windows office2003
ThisDocument
Module1