Behavioral task
behavioral1
Sample
DETALLES_2562.doc
Resource
win7-20230220-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
DETALLES_2562.doc
Resource
win10v2004-20230220-en
11 signatures
150 seconds
General
-
Target
f19d159a075a6ab2f063e01922822699fb70cee79f8b1b3853017ff57e700f00.zip
-
Size
124KB
-
MD5
e5f529d0c4972d5b7dcbf1f49453b2d8
-
SHA1
a48f2885f527937745f74f9874d5ace1dfa11a77
-
SHA256
38ed6468f9f09457943771b669c1c25d6fdd80e1978f86bf889f4779165fb4fd
-
SHA512
735adeab8b9a316cf49364d6411fc5f2bbdc6a50e1c5b1a61f706ec63aaa288408ed60dfe8596a2ebc2f9860c178be27309acd0d4ac137e42e5ba0e2b8b9e2fa
-
SSDEEP
3072:8sS2XyZpXmzwfuHVozliV850HM70NvuDzKRXuosd4mm:8fIgesu1ozO85UMyW/KReZNm
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack002/DETALLES_2562.doc office_macro_on_action -
resource static1/unpack002/DETALLES_2562.doc
Files
-
f19d159a075a6ab2f063e01922822699fb70cee79f8b1b3853017ff57e700f00.zip.zip
Password: infected
-
f19d159a075a6ab2f063e01922822699fb70cee79f8b1b3853017ff57e700f00.zip.zip
Password: infected
-
DETALLES_2562.doc.doc windows office2003
ThisDocument
Module1