Behavioral task
behavioral1
Sample
Please send copy invoice.doc
Resource
win10v2004-20230220-en
12 signatures
150 seconds
General
-
Target
Please send copy invoice.zip
-
Size
670KB
-
MD5
4ff9ed1a145238fdccfe822237eae3dd
-
SHA1
7ecb6366dc68c3a452cd6b6d5f6da7e1aa004078
-
SHA256
7e592c7cbdeb6497c8c1e24224c124f953065ec87e4e09d03ee4716215f42f59
-
SHA512
a6b934c6599c48becbf31681b59491e7092963c5a8b9438be23f5a8f65f5e94ac40ee3471e29cf30eafa68446d9446b884d89044285f2f4e3ebd5c98577e77b0
-
SSDEEP
3072:ITdhlKitY6gngARvVndTW9ZCPuJSDCKvjl1flV+crxAm40/yL/sEZGNKl/l:QhQOY6egwndgkPwSDCKFVj+mb/yFIs/l
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/Please send copy invoice.doc office_macro_on_action -
resource static1/unpack001/Please send copy invoice.doc
Files
-
Please send copy invoice.zip.zip
-
Please send copy invoice.doc.doc windows office2003
ThisDocument
Module1