Behavioral task
behavioral1
Sample
Candcinstallationservices.doc
Resource
win7-20230220-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Candcinstallationservices.doc
Resource
win10v2004-20230220-en
windows10-2004-x64
12 signatures
150 seconds
General
-
Target
ee568f727f584c423ce64a6eed7ec267.bin
-
Size
651KB
-
MD5
ee568f727f584c423ce64a6eed7ec267
-
SHA1
e6a85c29890ce37a1b70e82c293fac0cc6b0ecf1
-
SHA256
c531dc1c215ae18497b71ee6aa73eb83bf238184f1ec3aae6678a42b79b6fcab
-
SHA512
5194ad70c5f1b1db314e2760c9ce1b93413f46522aeec7ae1464bc994236e1ad6e653b25c9d776571a847b1c3f606c68bec20b5d329a65247dec21645dcda515
-
SSDEEP
6144:EJNbwmfcuHom8Hz2f//ywiWT8xVTI5wqP:obPHom8TYyCT8x5I5wU
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/Candcinstallationservices.doc office_macro_on_action -
resource static1/unpack001/Candcinstallationservices.doc
Files
-
ee568f727f584c423ce64a6eed7ec267.bin.zip
Password: infected
-
Candcinstallationservices.doc.doc windows office2003
ThisDocument
Module1