Overview
overview
10Static
static
8638001eb-8...6f.eml
windows7-x64
6638001eb-8...6f.eml
windows10-2004-x64
3MC12473488...20.zip
windows7-x64
1MC12473488...20.zip
windows10-2004-x64
1MC12473488...20.doc
windows7-x64
10MC12473488...20.doc
windows10-2004-x64
10email-html-1.html
windows7-x64
1email-html-1.html
windows10-2004-x64
1Behavioral task
behavioral1
Sample
638001eb-8a00-654c-8f24-bbaf23dd656f.eml
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
638001eb-8a00-654c-8f24-bbaf23dd656f.eml
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
MC12473488114082366715_202303081720.zip
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
MC12473488114082366715_202303081720.zip
Resource
win10v2004-20230221-en
Behavioral task
behavioral5
Sample
MC12473488114082366715_202303081720.doc
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
MC12473488114082366715_202303081720.doc
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
email-html-1.html
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
email-html-1.html
Resource
win10v2004-20230220-en
General
-
Target
638001eb-8a00-654c-8f24-bbaf23dd656f.eml
-
Size
942KB
-
MD5
28d85a277c0932f370a0fc215d265bc1
-
SHA1
8fe58b6251376dc551996ca0e262c8d3f2e7b069
-
SHA256
48966a01a81ea535d1b87977300d6e4c6443f012420166b5c11f3a30cf3b645a
-
SHA512
85cbd91230570db3544c493db5f6b5cd367e3c02900d0aca526261eb9c321885e401455d31e0d0d7252e98757ffd5bfbe0442b9683c95bba21931252d8b83f4f
-
SSDEEP
6144:xTfkLSCbPM5X0CqfyNW/+zfYCmqPR3pcBv4f+2vWx:xTfkbPaZgZGzfXPl6++2o
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack002/MC12473488114082366715_202303081720.doc office_macro_on_action -
resource static1/unpack002/MC12473488114082366715_202303081720.doc
Files
-
638001eb-8a00-654c-8f24-bbaf23dd656f.eml.eml
-
MC12473488114082366715_202303081720.zip.zip
-
MC12473488114082366715_202303081720.doc.doc windows office2003
ThisDocument
Module1
-
email-html-1.txt.html