Behavioral task
behavioral1
Sample
Rech.doc
Resource
win7-20230220-en
12 signatures
150 seconds
General
-
Target
09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip
-
Size
149KB
-
MD5
76b535f262ac16d3aee9a110ea0a955f
-
SHA1
3e865701de6fbadac00d5a002837b360085935e9
-
SHA256
b69698792501d2a31e47291b45937f3da829b88b5629e5952bce48a639c597bb
-
SHA512
fea3ae9283684643148f80dbcd622e343da3737ed0608c315cea0341397d777eb7951916176fedbb74030600f23b637e37b1ef54f7d3c5e2f6ac86e3e3a9ca41
-
SSDEEP
3072:cuPatY2uliGrR2rf2HzSFnkhLjP/gf+TRbJ3usSmFX9e/cm7p2MnQgwpe:cuPRBliuHmOtkcbJSINu7B
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack002/Rech.doc office_macro_on_action -
resource static1/unpack002/Rech.doc
Files
-
09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip.zip
Password: infected
-
09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip.zip
Password: infected
-
Rech.doc.doc windows office2003
ThisDocument
Module1