Overview
overview
10Static
static
803b07ee1-f...28.eml
windows7-x64
603b07ee1-f...28.eml
windows10-2004-x64
35852826951...68.zip
windows7-x64
15852826951...68.zip
windows10-2004-x64
15852826951...68.doc
windows7-x64
105852826951...68.doc
windows10-2004-x64
10email-html-1.html
windows7-x64
1email-html-1.html
windows10-2004-x64
1Behavioral task
behavioral1
Sample
03b07ee1-f9d0-193d-e0f9-2ddcb609d728.eml
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
03b07ee1-f9d0-193d-e0f9-2ddcb609d728.eml
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
5852826951552390283377037368.zip
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
5852826951552390283377037368.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
5852826951552390283377037368.doc
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
5852826951552390283377037368.doc
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
email-html-1.html
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
email-html-1.html
Resource
win10v2004-20230220-en
General
-
Target
03b07ee1-f9d0-193d-e0f9-2ddcb609d728.eml
-
Size
897KB
-
MD5
d7131201e2e2249340fa652a565eab47
-
SHA1
c3a282cbcb6c93dc48e90f0b902ff458024c4e5b
-
SHA256
9b9a962311f33efc6d4477c0abd6a5218773a7df1ec8bb81ffaff08d4e944aec
-
SHA512
6d3d67e9cc1bc47acdcabbccc1e1614f9efb5c399c43f001cb689b62a6ed109da77cf227d79e43733f8decbb0bcc9e3b858eb725929339ffae24e31c4f184fa7
-
SSDEEP
6144:c7Z5Z9h6RSDVrPQxZ8wlOS/NLNdQB2el1Ne:c7nZdDJQxZzlOS/hQ2e3Ne
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack002/5852826951552390283377037368.doc office_macro_on_action -
resource static1/unpack002/5852826951552390283377037368.doc
Files
-
03b07ee1-f9d0-193d-e0f9-2ddcb609d728.eml.eml
-
5852826951552390283377037368.zip.zip
-
5852826951552390283377037368.doc.doc windows office2003
ThisDocument
Module1
-
email-html-1.txt.html