Behavioral task
behavioral1
Sample
52404433918804995__2023-10-03_1625.doc
Resource
win7-20230220-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
52404433918804995__2023-10-03_1625.doc
Resource
win10v2004-20230221-en
12 signatures
150 seconds
General
-
Target
CTRCHINA.zip
-
Size
694KB
-
MD5
bf17cd782a147925398811f5baaefa15
-
SHA1
df8431ab5350c794ff19eb790f20da2c9aa3ac13
-
SHA256
45029f3ac0ae62bc2a3c2ca8b4dff08319346206cb2ea1ef1c1cbd4fb90bc0a8
-
SHA512
f3ecff885494aa717731c76bd2869039db4b3fca36012656e00c6746fe147f77a128cdfd85b57551767d52fd002340d6046df450b6a44d24568332527f36cd99
-
SSDEEP
3072:+TdhlKitY6gngARvVndTW9ZCPuJSDCKvjl1flV+crxAm40/yL/sEZGNKl/Q:WhQOY6egwndgkPwSDCKFVj+mb/yFIs/Q
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/52404433918804995__2023-10-03_1625.doc office_macro_on_action -
resource static1/unpack001/52404433918804995__2023-10-03_1625.doc
Files
-
CTRCHINA.zip.zip
-
52404433918804995__2023-10-03_1625.doc.doc windows office2003
ThisDocument
Module1