Behavioral task
behavioral1
Sample
DETALLES_2562.doc
Resource
win7-20230220-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
DETALLES_2562.doc
Resource
win10v2004-20230220-en
windows10-2004-x64
11 signatures
150 seconds
General
-
Target
f19d159a075a6ab2f063e01922822699fb70cee79f8b1b3853017ff57e700f00.zip
-
Size
124KB
-
MD5
572ec2ea94dcc07ade4fe542e8f2d680
-
SHA1
2c683e3da39c7747be192889f83bd66d4404b59e
-
SHA256
e0571494d2e6bb0f9074704db9d9c9297cbac5544cc15bf62c3a34e1da81cd5b
-
SHA512
78678d735a10a68e1cb7840520dbb64c65b23be3208d33f87aae7a9f7218f1ebcd7d360033699cbc02f555f2dc8570921c95a143090d01b64313b9f2ca66f771
-
SSDEEP
3072:/uS5K246y5U2bJTTLS5nK6Kvtxn31Xhl/UfE2PxgT:GS5npIVnanKpvFXTUVPuT
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack002/DETALLES_2562.doc office_macro_on_action -
Processes:
resource static1/unpack002/DETALLES_2562.doc
Files
-
f19d159a075a6ab2f063e01922822699fb70cee79f8b1b3853017ff57e700f00.zip.zip
Password: infected
-
f19d159a075a6ab2f063e01922822699fb70cee79f8b1b3853017ff57e700f00.zip.zip
Password: infected
-
DETALLES_2562.doc.doc windows office2003
ThisDocument
Module1