Behavioral task
behavioral1
Sample
2d9e4dd3-3ed4-dc8e-67f5-857831686eea.eml
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2d9e4dd3-3ed4-dc8e-67f5-857831686eea.eml
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Gmail.zip
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Gmail.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
952786590042030229132__2023-07-03_1900.doc
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
952786590042030229132__2023-07-03_1900.doc
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
email-html-1.html
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
email-html-1.html
Resource
win10v2004-20230220-en
General
-
Target
2d9e4dd3-3ed4-dc8e-67f5-857831686eea.eml
-
Size
863KB
-
MD5
f9b27c9bb589cd03d51e5425f48173de
-
SHA1
a6b367db3ba36c1ef38f336dc1790847ecf54d00
-
SHA256
dd3b7834b68dfff8b39140d4ace6cf699605f9104456b92a98c1844ec42d949d
-
SHA512
8c86630b73f9a8143205316aada326813be9471d2e051e223f9e6cf6e8a1ddd99d3628aa4b0fa59c6040381a2289f4a0a40d6d46b4b25381a77bf188dcf560ad
-
SSDEEP
3072:bM2ba7acpTwaPlTeIrkHNU4hRElmvOE5Akf3TYGZmtOK2TRNPtjShyFrZHk1PzB:bMVzwaARNPhREif5xvUINMcZHkxB
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack002/952786590042030229132__2023-07-03_1900.doc office_macro_on_action -
resource static1/unpack002/952786590042030229132__2023-07-03_1900.doc
Files
-
2d9e4dd3-3ed4-dc8e-67f5-857831686eea.eml.eml
-
Gmail.zip.zip
-
952786590042030229132__2023-07-03_1900.doc.doc windows office2003
ThisDocument
Module1
-
email-html-1.txt.html