Behavioral task
behavioral1
Sample
Payment status.doc
Resource
win7-20230220-en
windows7-x64
12 signatures
600 seconds
Behavioral task
behavioral2
Sample
Payment status.doc
Resource
win10v2004-20230220-en
windows10-2004-x64
12 signatures
600 seconds
General
-
Target
Payment status.zip
-
Size
741KB
-
MD5
0e8d480a5757b7e51cd3b9bd48e900d4
-
SHA1
43b1756f075ae9f854656fbc380672adf2940620
-
SHA256
4c6f2c47c91783d4f629023488b034cb86dcc9df29d4c8e414b90a0bb386d5e6
-
SHA512
3dd03126ad2271c432dde82fa3294d8f36ebdc0987291694674eb119ec386ffb9fb3b3c56b48603d913dab736336f93ec222b1603d424b4f7c86b8bab1701d54
-
SSDEEP
6144:z2OPYgKAapWp7q0CYcB906oP6FnpamsXp+YIDK/vj9xHsQUsXbq:HggCwZq0CvfS0np0om/vBxMBse
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack001/Payment status.doc office_macro_on_action -
Processes:
resource static1/unpack001/Payment status.doc
Files
-
Payment status.zip.zip
-
Payment status.doc.doc windows office2003
ThisDocument
Module1