Resubmissions
14-03-2023 07:40
230314-jhhfaseb66 10Behavioral task
behavioral1
Sample
form.doc
Resource
win7-20230220-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
form.doc
Resource
win10v2004-20230220-en
windows10-2004-x64
12 signatures
150 seconds
General
-
Target
form.zip
-
Size
670KB
-
MD5
d4a57806ff05205070524742cb7e26fd
-
SHA1
e7f19042923ebb2846b9a04d771106ea6c7f439d
-
SHA256
f4920b5ceb0256eb3c4fe50ae938eb87197afd1ffe3f7a9c43f6b6c3f8aa7e67
-
SHA512
e0bdbb3ea21881106c8d035f80d1dc60bf18cdd3f56a83b494373723dcc4b2fc94292cf51eb43797ec4909972859866833142bbc4b0215f38daa70389dd9c0fd
-
SSDEEP
3072:KdWyneQJ3o2E/MYpp7qKsL/wpPG4zqDz5DXmKWg11069k3FFEmcNBjsa:KQs1oPvd7s6PGT6Kb10AkvEDB
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack001/form.doc office_macro_on_action -
Processes:
resource static1/unpack001/form.doc
Files
-
form.zip.zip
-
form.doc.doc windows office2003
ThisDocument
Module1