Behavioral task
behavioral1
Sample
PN9642931951_202303091502.doc
Resource
win7-20230220-ja
windows7-x64
4 signatures
150 seconds
General
-
Target
PN9642931951_202303091502.zip
-
Size
656KB
-
MD5
fec9801908fff256029f6d16547e88ca
-
SHA1
632ec4cc7ccecff714e113be434dba7f57e9462e
-
SHA256
3643b11034cd76ef14c56d5b1b9f69c1b92b505c8e8ca48df0cb916ad462e271
-
SHA512
f28524b725e5323004f36cf0c17fa110aa45063f4e0db1cee27036ae59f33666fcdcee2844bf5c3e8e8144af16a67246090969ceba989f9b3f40d2c66380cded
-
SSDEEP
3072:f9KxsZJTw9U8wkt3d9Oi0jKXnacTBy1uhzhh8Q8TiqfMA2+DVfZx2ePQCOJEI:f93zn23Oi0uXnTZj+Q8TbfMAJ1xPQjJ5
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack001/PN9642931951_202303091502.doc office_macro_on_action -
Processes:
resource static1/unpack001/PN9642931951_202303091502.doc
Files
-
PN9642931951_202303091502.zip.zip
-
PN9642931951_202303091502.doc.doc windows office2003
ThisDocument
Module1