Behavioral task
behavioral1
Sample
ZYQ40437770316551899206_202303101542.doc
Resource
win10v2004-20230220-en
5 signatures
30 seconds
General
-
Target
ZYQ40437770316551899206_202303101542.zip
-
Size
665KB
-
MD5
efe0acbc94561e25e706dcf035f8b638
-
SHA1
25c0a12dc3fd32bb7ff8482eee30744e2c8db621
-
SHA256
9bcc4b7a4ca63b3e34b731c25fe9237511b690485342f10db234905ebb67727c
-
SHA512
4c26ffaa3fce46489174000856efb85263068ffe737af13cc1a9a1ca2a92c1dbcf505a36d4fa4f3717e8e3ff17df05023808e6e5d594422090d4bcf61fef961a
-
SSDEEP
3072:PTdhlKitY6gngARvVndTW9ZCPuJSDCKvjl1flV+crxAm40/yL/sEZGNKl/u:JhQOY6egwndgkPwSDCKFVj+mb/yFIs/u
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/ZYQ40437770316551899206_202303101542.doc office_macro_on_action -
resource static1/unpack001/ZYQ40437770316551899206_202303101542.doc
Files
-
ZYQ40437770316551899206_202303101542.zip.zip
-
ZYQ40437770316551899206_202303101542.doc.doc windows office2003
ThisDocument
Module1