Behavioral task
behavioral1
Sample
Rech.doc
Resource
win7-20230220-en
12 signatures
150 seconds
General
-
Target
Rech.zip
-
Size
697KB
-
MD5
2cc96c1351a8019f25c700f04badc8f9
-
SHA1
6f264d240d0bf48a7484f9c949f9be7b74cf32f3
-
SHA256
2b4d68f3afc4141e7a7e07539183a5e9d9b9f415583adaf89d72ad197e605744
-
SHA512
df923297cd47132fedfd578a95eaba8bc426c62e0922bb52bea6b5afc9c655957c339b79e57096cc867f5c8d4581bf46866b6a454f203645c6bd711122f8eb82
-
SSDEEP
3072:zTdhlKitY6gngARvVndTW9ZCPuJSDCKvjl1flV+crxAm40/yL/sEZGNKl/Q:lhQOY6egwndgkPwSDCKFVj+mb/yFIs/Q
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/Rech.doc office_macro_on_action -
resource static1/unpack001/Rech.doc
Files
-
Rech.zip.zip
-
Rech.doc.doc windows office2003
ThisDocument
Module1