Behavioral task
behavioral1
Sample
H0293953086104090_202303081006.doc
Resource
win7-20230220-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
H0293953086104090_202303081006.doc
Resource
win10v2004-20230221-en
windows10-2004-x64
12 signatures
150 seconds
General
-
Target
H0293953086104090_202303081006.doc
-
Size
526.3MB
-
MD5
a2b74cec333bf8ac52a8fc0b36fdfa07
-
SHA1
b4c288bb584b14045137550b56b802636f36039f
-
SHA256
4ae47c5f127c9e70fc3ce10f44e475334af3c62e800a31255c3029d023a4a629
-
SHA512
64b096fcf4fe9cf825748ed4fd661c1fe4b7d2a44102315076fb8608fbeaf2f09f331932b9568e35dd3de4ec24131af2d14f0d4c8bb4caf315b1144f16a0572f
-
SSDEEP
6144:xPn4VZXbatu7MDogsDkHS50LdfcGcbz1f5M9KTFrMpSlMK3Ru+Q28:xP4PbNMkgg3Ru+x
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
H0293953086104090_202303081006.doc.doc windows office2003
ThisDocument
Module1