Behavioral task
behavioral1
Sample
5852826951552390283377037368.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5852826951552390283377037368.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
5852826951552390283377037368.doc
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
5852826951552390283377037368.doc
Resource
win10v2004-20230220-en
General
-
Target
5852826951552390283377037368.zip
-
Size
644KB
-
MD5
efea2d8678b3927e36e025f4fdebab05
-
SHA1
3205cf01f7e58af23b01e600065699a5255254a5
-
SHA256
7f746e9f809a42c204791b96a39009116181cc8387dd1b9a18b5298542259325
-
SHA512
6ff9f610b8211c362ffb825c531b2c39de3b6b0e2445b53ef67fc9a548c83e218c781d6257df3042b8e57efa193e724cc0742d8b78448ba1aff059d48a2f95b3
-
SSDEEP
3072:s9KxsZJTw9U8wkt3d9Oi0jKXnacTBy1uhzhh8Q8TiqfMA2+DVfZx2ePQCOJEV:s93zn23Oi0uXnTZj+Q8TbfMAJ1xPQjJI
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack001/5852826951552390283377037368.doc office_macro_on_action -
Processes:
resource static1/unpack001/5852826951552390283377037368.doc
Files
-
5852826951552390283377037368.zip.zip
-
5852826951552390283377037368.doc.doc windows office2003
ThisDocument
Module1