Behavioral task
behavioral1
Sample
2023-03-08_1338.doc
Resource
win7-20230220-en
windows7-x64
12 signatures
150 seconds
General
-
Target
2023-03-08_1338.doc
-
Size
522.3MB
-
MD5
2148a6a2bef5a35ce5665cbc12d5e474
-
SHA1
2e87b33309c888ab7d655e92a45a31f15753fdee
-
SHA256
f616da0ebb4f984aecd40da922c0cdf70987643a86afadc969aa76598120cd5d
-
SHA512
fb232985018569cdbba001273278a6128af1395e1dc4631b023a0c49fefffd43a93dd6b0332c2cc634aa87d850ea2866614cacb6b064e57f4d48c7b41b60ea4c
-
SSDEEP
6144:xPn4VZXbatu7MDogsDkHS50LdfcGcbz1f5M9KTFrMpSlMK3Ru+Q28:xP4PbNMkgg3Ru+x
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
2023-03-08_1338.doc.doc windows office2003
ThisDocument
Module1