Behavioral task
behavioral1
Sample
Rech.doc
Resource
win7-20230220-en
7 signatures
150 seconds
General
-
Target
09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip
-
Size
149KB
-
MD5
e998d2eb86f259f21f0c0dbf07eb6039
-
SHA1
5c6ceb41dcb4c83f992da37ef5dd98880de6c3d0
-
SHA256
4c9f516f0cf8a7a696f359ccfeeda13bdc4432fec1eb2f2e2ba7d0680607c1d8
-
SHA512
8d49a73358d21927f17955c45bc9a705fad9b6813c4dec4fd007a8bea7bf39cffeeffb883d9a1ef7e3ef187603c4b795b4048c4d6c1c8abe848ec67ef42bad3e
-
SSDEEP
3072:4qoaS0iW7i3rw/jgBVylZ+sV6+xupMiYEPDmVlhm7peaQ04Znuao:41dWm34j40Z76+xuzYcDmj9lnQ
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack002/Rech.doc office_macro_on_action -
resource static1/unpack002/Rech.doc
Files
-
09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip.zip
Password: infected
-
09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip.zip
Password: infected
-
Rech.doc.doc windows office2003
ThisDocument
Module1