Behavioral task
behavioral1
Sample
8a60139c-1e4c-6f10-a2fa-19da2af69d39.eml
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8a60139c-1e4c-6f10-a2fa-19da2af69d39.eml
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Gmail.zip
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Gmail.zip
Resource
win10v2004-20230221-en
Behavioral task
behavioral5
Sample
0419675272807527999__2023-08-03_1602.doc
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
0419675272807527999__2023-08-03_1602.doc
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
email-html-1.html
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
email-html-1.html
Resource
win10v2004-20230220-en
General
-
Target
8a60139c-1e4c-6f10-a2fa-19da2af69d39.eml
-
Size
915KB
-
MD5
c7fc9e581abe0f90b172634e60539b15
-
SHA1
075a2b4b1683c8f58ecc5e611dbe2d52994d440e
-
SHA256
c7b0f5e3530cdf399be82be797e28f90d2e526d624183da93fd961484e57ad84
-
SHA512
e85be248b47254f9452f148033d8ce504250580adb1ebe1667feed8fce6447bbd194b4b0c5dfc347839323fabf300b3803251270eab84f8319d0240ae1fee881
-
SSDEEP
6144:bcPS3EGYMdMqouox4TTq4xGfjuqkIbsjTYjoWpF2Sea0TjSA4I:bcK0GUVuox4nq4xG7ZbGYMWpleau74I
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack002/0419675272807527999__2023-08-03_1602.doc office_macro_on_action -
Processes:
resource static1/unpack002/0419675272807527999__2023-08-03_1602.doc
Files
-
8a60139c-1e4c-6f10-a2fa-19da2af69d39.eml.eml
-
https://teams.microsoft.com/l/meetup-join/19%3ameeting_MGFmYjQ3ODgtYzlmNy00OGI4LWE3M2YtNjljNDY2YTA0ZDcz%40thread.v2/0?context=%7b%22Tid%22%3a%2263ce7d59-2f3e-42cd-a8cc-be764cff5eb6%22%2c%22Oid%22%3a%228a575db1-4de2-48d0-a8d0-44396dd98e46%22%7d
-
https://www.microsoft.com/en-us/microsoft-teams/download-app
-
https://www.microsoft.com/microsoft-teams/join-a-meeting
-
https://www.webex.com/msteams?confid=1390302464&tenantkey=infosys&domain=m.webex.com
-
https://aka.ms/JoinTeamsMeeting
-
https://teams.microsoft.com/meetingOptions/?organizerId=8a575db1-4de2-48d0-a8d0-44396dd98e46&tenantId=63ce7d59-2f3e-42cd-a8cc-be764cff5eb6&threadId=19_meeting_MGFmYjQ3ODgtYzlmNy00OGI4LWE3M2YtNjljNDY2YTA0ZDcz@thread.v2&messageId=0&language=en-US
-
-
Gmail.zip.zip
-
0419675272807527999__2023-08-03_1602.doc.doc windows office2003
ThisDocument
Module1
-
email-html-1.txt.html