Behavioral task
behavioral1
Sample
2023-03-08_1254.zip
Resource
win10-20230220-en
windows10-1703-x64
0 signatures
150 seconds
General
-
Target
989898.msg
-
Size
695KB
-
MD5
c79fc6746c30c7cffe9733c1ee4f3276
-
SHA1
6b5b8dc9aa5bd2ce98ac9e2afca7eb538c097fc4
-
SHA256
f01273b86290a8d8e1b43fcea7417544d32921d597d207528433d1daa1951c7a
-
SHA512
ef7a9596ac924b32dddcd85bd5c8ad62bd88f475c080a2d7a905230e9fc1da62804aa8594f84a528615334f64e4ef3a28781db025e83b1ab0c989442bce52449
-
SSDEEP
6144:4nJNbwmfcuHom8Hz2f//ywiWT8xVTI5wq:QbPHom8TYyCT8x5I5w
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack002/2023-03-08_1254.doc office_macro_on_action -
Processes:
resource static1/unpack002/2023-03-08_1254.doc
Files
-
989898.msg.msg
-
2023-03-08_1254.zip.zip
-
2023-03-08_1254.doc.doc windows office2003
ThisDocument
Module1