Behavioral task
behavioral1
Sample
form.doc
Resource
win7-20230220-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
form.doc
Resource
win10v2004-20230220-en
12 signatures
150 seconds
General
-
Target
form.zip
-
Size
780KB
-
MD5
f9da07301d31a35765e9a11818e6af37
-
SHA1
c5253bcb5cbb13c6d51b582ab136e5642bdc6a69
-
SHA256
f61775502614f1d9b2d8c5bb676af25e16682fc1d28c6be1ea2d78f50e400c57
-
SHA512
52c0bc0f86999f6eb0ee7bf9a8c12db69692ba9bfac3e1e08ce8b5cf7d230134197b61cc4729f0b153bfa40176b13d1f8e88bb679f6270590d72e8d2e3704f2e
-
SSDEEP
6144:/kjM/ZrZPtRQhpuTec+hFF1NGJsCCmIivTF2f8bKm6zBA7FjAvxtR9NW:sMZr1YpblFHpCCmRBbKm6l02bbNW
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/form.doc office_macro_on_action -
resource static1/unpack001/form.doc
Files
-
form.zip.zip
-
form.doc.doc .js windows office2003
ThisDocument
Module1