Behavioral task
behavioral1
Sample
DOC_867991348.doc
Resource
win7-20230220-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC_867991348.doc
Resource
win10v2004-20230220-en
windows10-2004-x64
12 signatures
150 seconds
General
-
Target
DOC_867991348.zip
-
Size
725KB
-
MD5
9c571de2c25ef5acda135c1de99d17a5
-
SHA1
7cc6c1f65f6f28e43a4ed958328e060f38e1c9ed
-
SHA256
34d2dcf1d040ef6a492681dd2b6389f2658f905559ae38319444d7f293ec88de
-
SHA512
5dd5b2e1c3c9e5cc09ebea2a2c3626baf6cb45c4e7b8d1eee7aa8c3d95a8e124e22cce91628950490aa243eefc1c6f8c0e8b0448ddcc7fa6e68388fad65b7fa7
-
SSDEEP
6144:ewZnDlMy6O3qKmCRUe1B5uLqcHfVDNUV3nJGM+BTf:ltDlb6IqXCRUe1BTcH8VIM+Vf
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack001/DOC_867991348.doc office_macro_on_action -
Processes:
resource static1/unpack001/DOC_867991348.doc
Files
-
DOC_867991348.zip.zip
-
DOC_867991348.doc.doc windows office2003
ThisDocument
Module1