Behavioral task
behavioral1
Sample
Rech.doc
Resource
win7-20230220-en
7 signatures
150 seconds
General
-
Target
09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip
-
Size
149KB
-
MD5
2d2c8eea29e978e8228e89f923160a2c
-
SHA1
381ededbf02e77087a38de9b65522de1b8fb8471
-
SHA256
163e6406e875ee099ce97c7d73cc7f3b80e8140e441857947cad8acad8d392b0
-
SHA512
8bea3796e48c67a1f4335006da08bdfe4ff80e2c122dd75092f2fe94751ad6a5de8e5d2ad6b054e9dc468bc0f7944a3dfef693ece37a86ec809cd6b26664eb89
-
SSDEEP
3072:CEsdT6Mbbuwdnat5hg2biCSjj9U1ILWMF15Jth:CEsdT6sxn+e2b4H9bLW015Jj
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack002/Rech.doc office_macro_on_action -
resource static1/unpack002/Rech.doc
Files
-
09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip.zip
Password: infected
-
09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip.zip
Password: infected
-
Rech.doc.doc windows office2003
ThisDocument
Module1