Behavioral task
behavioral1
Sample
attachments-6638165552.doc
Resource
win7-20230220-en
windows7-x64
12 signatures
150 seconds
General
-
Target
attachments-6638165552.zip
-
Size
712KB
-
MD5
c04ddae4ebc01095f1c8890b76e8e9fd
-
SHA1
802267e3c168ab28deaa975ab5b1980bec6e1e3c
-
SHA256
f41ce611f49c8b49344400ad79f9c1b99d15b89b3cd29a8f44f9162b8fdeb3e4
-
SHA512
56c9ba47aa72ba963c3135ea98c7f40d3e42c397280030ee6208e2e69168825014dc91c3a6a1d4192de80fb785f43eb7dbea4c1b1f3c833cfb669225d6cf81c4
-
SSDEEP
6144:owZnDlMy6O3qKmCRUe1B5uLqcHfVDNUV3nJGM+BTX:7tDlb6IqXCRUe1BTcH8VIM+VX
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack001/attachments-6638165552.doc office_macro_on_action -
Processes:
resource static1/unpack001/attachments-6638165552.doc
Files
-
attachments-6638165552.zip.zip
-
attachments-6638165552.doc.doc windows office2003
ThisDocument
Module1