Behavioral task
behavioral1
Sample
0af0c5a6fa15435b47e2b1e822346576.doc
Resource
win7-20230220-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
0af0c5a6fa15435b47e2b1e822346576.doc
Resource
win10v2004-20230220-en
windows10-2004-x64
6 signatures
150 seconds
General
-
Target
0af0c5a6fa15435b47e2b1e822346576
-
Size
12KB
-
MD5
0af0c5a6fa15435b47e2b1e822346576
-
SHA1
eb194a5adfc73a5233a29e0c4c3c2d55ec8f5f30
-
SHA256
ca394facf6ef4eac93b6b3caab7f8c000535dfea2d54295fc222c92756f1e9a0
-
SHA512
395fa8f199e8fee083f1c124ac2dc4a2a50582a1d3d38b33ea9310315934b4b6af6959c56c30f9eb02715cde18487c97cbc0bbcba332334456405c9292c0e9c5
-
SSDEEP
192:uXAK7fr4cH1O6JN0j26/Grtvxkd6fs3a:hcRJN0jLertJkd60
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
0af0c5a6fa15435b47e2b1e822346576.doc windows office2003
ThisDocument