Behavioral task
behavioral1
Sample
4373179537.doc
Resource
win7-20230220-en
windows7-x64
12 signatures
150 seconds
General
-
Target
4373179537.zip
-
Size
736KB
-
MD5
f22108b9413c684cd5a920c80b025177
-
SHA1
5afb0ae19f15c50f774e4707b725fb32c6313140
-
SHA256
4879d68f64e84f0fb5b64b2dd212f76462a01f8e10f4d8ed6287cac8421e589c
-
SHA512
26f1a73396fed83683eec8409724b46095cab6e387565d58f3f4fa7e4ec712839e086865e9c9787c3fd518413405aca90c4aea274bd23e2c9d92bb80460adfa0
-
SSDEEP
6144:QwZnDlMy6O3qKmCRUe1B5uLqcHfVDNUV3nJGM+BT/:DtDlb6IqXCRUe1BTcH8VIM+V/
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack001/4373179537.doc office_macro_on_action -
Processes:
resource static1/unpack001/4373179537.doc
Files
-
4373179537.zip.zip
-
4373179537.doc.doc windows office2003
ThisDocument
Module1