Behavioral task
behavioral1
Sample
form.doc
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
form.doc
Resource
win10v2004-20230220-en
6 signatures
150 seconds
General
-
Target
form.zip
-
Size
687KB
-
MD5
ff8ce19aefc4e7d50b4de01eac57a000
-
SHA1
1169961a9def4151366f5721b6ef85231f604d44
-
SHA256
0ec1767f6c731f96841c915a47a7995cc716db31f397aa11fb7ba85485389dd7
-
SHA512
4c70183f27792165b9fbb1b2efba5b5796244ac22ec545be4b7a83f01825b1c5c83e8dfb45c27c28ff1ef16f780dcdbd7f01b4e2813c299439f687c32275e5ad
-
SSDEEP
3072:ZIFb4Wmkqke+cEeqH9vH+i2s1Vj8JxuLVpMs75XLKZv+:ZOykqk6Lw+i2s1Vjkxuxp/Qv+
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack001/form.doc office_macro_on_action -
Processes:
resource static1/unpack001/form.doc
Files
-
form.zip.zip
-
form.doc.doc windows office2003
ThisDocument
Module1