Overview
overview
10Static
static
893f0b81e-2...71.eml
windows7-x64
693f0b81e-2...71.eml
windows10-2004-x64
3Q255479503...32.zip
windows7-x64
1Q255479503...32.zip
windows10-2004-x64
1Q255479503...32.doc
windows7-x64
10Q255479503...32.doc
windows10-2004-x64
10email-html-1.html
windows7-x64
1email-html-1.html
windows10-2004-x64
1Behavioral task
behavioral1
Sample
93f0b81e-2fab-6767-7e64-3812cc9fe371.eml
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
93f0b81e-2fab-6767-7e64-3812cc9fe371.eml
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Q25547950344368401064_202303091132.zip
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Q25547950344368401064_202303091132.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Q25547950344368401064_202303091132.doc
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Q25547950344368401064_202303091132.doc
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
email-html-1.html
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
email-html-1.html
Resource
win10v2004-20230221-en
General
-
Target
93f0b81e-2fab-6767-7e64-3812cc9fe371.eml
-
Size
941KB
-
MD5
50c9a15a4edc85b3ea32753374f49fee
-
SHA1
bc05011137beac6d0567ca6b2842bb77ea74baf7
-
SHA256
d643677b5e5d42199d6717218a8b62bf0319a3e21d176bc5e6757f6e202cef9c
-
SHA512
675a5f35fdf12b430041c34ce7b867cead4ade2913e5b977fade14961a492ca46506433d7bb1de33e945415061dc33884d093dfdbc228e174686b0ceddc58866
-
SSDEEP
6144:vfuxRRaFK6Wth/TWlEIV6KRxlENOe1TNp2:vfux16G9WlTV6KVAOe15p2
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack002/Q25547950344368401064_202303091132.doc office_macro_on_action -
resource static1/unpack002/Q25547950344368401064_202303091132.doc
Files
-
93f0b81e-2fab-6767-7e64-3812cc9fe371.eml.eml
-
Q25547950344368401064_202303091132.zip.zip
-
Q25547950344368401064_202303091132.doc.doc windows office2003
ThisDocument
Module1
-
email-html-1.txt.html