Behavioral task
behavioral1
Sample
29513950.doc
Resource
win7-20230220-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
29513950.doc
Resource
win10v2004-20230220-en
windows10-2004-x64
12 signatures
150 seconds
General
-
Target
29513950.zip
-
Size
728KB
-
MD5
a84f5ec02272f7f62a76f8ce870d6d35
-
SHA1
87f99fe05696b64a684722fb0d13e645a4829919
-
SHA256
81cdf06a7312f43724741bf429908ef6d143abab81b826cfded452dcc916e6a9
-
SHA512
08905a58e5fbe89d508baed1bc2b3ae0f256cc6d3398bde334c74bb15b65dd366f8dbb98500fd36176189291cd86e5a75428b540ecd30ec1fd0e40a93603f485
-
SSDEEP
6144:fwZnDlMy6O3qKmCRUe1B5uLqcHfVDNUV3nJGM+BTJ:ItDlb6IqXCRUe1BTcH8VIM+VJ
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack001/29513950.doc office_macro_on_action -
Processes:
resource static1/unpack001/29513950.doc
Files
-
29513950.zip.zip
-
29513950.doc.doc windows office2003
ThisDocument
Module1