Behavioral task
behavioral1
Sample
2023-03-08_1254.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2023-03-08_1254.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
2023-03-08_1254.doc
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
2023-03-08_1254.doc
Resource
win10v2004-20230220-en
General
-
Target
123456.msg
-
Size
695KB
-
MD5
a29d0bf6608131d828502e3e70d1f4ab
-
SHA1
a292ee8fea76cca9753e4f6ac80a16652d631b74
-
SHA256
027cee8c09bc9cb153d9163ee1bfd79924409ad296ea44eba0503af8a2ddfabe
-
SHA512
e5913fb218a6c178a58acce56049f92a14c5008ed8fa297654abf41fdf5a81d919b20916144d121be080d6f7a4e0adaeb246e2a9d0a11a52ce42d7322c9473e6
-
SSDEEP
6144:3snJNbwmfcuHom8Hz2f//ywiWT8xVTI5wq:3sbPHom8TYyCT8x5I5w
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack002/2023-03-08_1254.doc office_macro_on_action -
resource static1/unpack002/2023-03-08_1254.doc
Files
-
123456.msg.msg
-
2023-03-08_1254.zip.zip
-
2023-03-08_1254.doc.doc windows office2003
ThisDocument
Module1