Behavioral task
behavioral1
Sample
form.doc
Resource
win7-20230220-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
form.doc
Resource
win10v2004-20230220-en
12 signatures
150 seconds
General
-
Target
form.zip
-
Size
691KB
-
MD5
7692b3134e57eb337a5d43b29ef9a80d
-
SHA1
1a1e6a33a81d4d1ad2d43364953863f93371ed41
-
SHA256
ede7ae52806944edc2f0a7241ccc9e6dbe3be9ae53073c1fe71259e7fd92973b
-
SHA512
0a4a3a0d7b7bd12cf1b73d33c58ebd39f58001b9752afd2f09337c9d4a3d8ce5aa4dd45a9afba0a5e2d6c2e52dc20f6c0c39506c974de50e9d3c82a97a52b3c8
-
SSDEEP
6144:ZJNbwmfcuHom8Hz2f//ywiWT8xVTI5wq5:dbPHom8TYyCT8x5I5wi
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/form.doc office_macro_on_action -
resource static1/unpack001/form.doc
Files
-
form.zip.zip
-
form.doc.doc windows office2003
ThisDocument
Module1