Overview
overview
10Static
static
8a074423d-4...d7.eml
windows7-x64
6a074423d-4...d7.eml
windows10-2004-x64
38527401453...25.zip
windows7-x64
18527401453...25.zip
windows10-2004-x64
18527401453...25.doc
windows7-x64
108527401453...25.doc
windows10-2004-x64
10email-html-1.html
windows7-x64
1email-html-1.html
windows10-2004-x64
1Behavioral task
behavioral1
Sample
a074423d-4a58-843b-a5ae-7826f5b141d7.eml
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a074423d-4a58-843b-a5ae-7826f5b141d7.eml
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
852740145385538061445618425.zip
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
852740145385538061445618425.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
852740145385538061445618425.doc
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
852740145385538061445618425.doc
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
email-html-1.html
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
email-html-1.html
Resource
win10v2004-20230220-en
General
-
Target
a074423d-4a58-843b-a5ae-7826f5b141d7.eml
-
Size
955KB
-
MD5
11dd0bea500f3e0dd58a1f0697d6c7bc
-
SHA1
1df31d42219d5f0e960e8f5e9662566255503824
-
SHA256
3f765f13b8028e53a755b6be87bd66b98a6eda7abe4135a6d1c319e060c73c69
-
SHA512
5b588babf55e5c5e3fd920f345c900fa3a1b12acc0cdc6c746255ed99e176f52d34c59b487e7ede486a93f41e0a9db522820b367686612aab3b129fc807fc6a9
-
SSDEEP
6144:udNkg9a2pd5EWIgbDG4k3FLGXKzcXEc+9qmK6MGSnplHsg:udNkt2CWIgvG4cFZzS+1K6r6Hsg
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack002/852740145385538061445618425.doc office_macro_on_action -
resource static1/unpack002/852740145385538061445618425.doc
Files
-
a074423d-4a58-843b-a5ae-7826f5b141d7.eml.eml
-
852740145385538061445618425.zip.zip
-
852740145385538061445618425.doc.doc windows office2003
ThisDocument
Module1
-
email-html-1.txt.html