Behavioral task
behavioral1
Sample
commenti_14032023.doc
Resource
win7-20230220-en
windows7-x64
12 signatures
150 seconds
General
-
Target
commenti_14032023.zip
-
Size
707KB
-
MD5
cd6f7a11d05bd9c5f5401274405ed07f
-
SHA1
4d9e3931a571de6897ad22fadb4e13cbabaa7a40
-
SHA256
f333982c6245780bb4542cde1e9c82a56d101a1a3d2307540f63faa1085b3e23
-
SHA512
e26beb3a9886be7a27ccc2e7b8c9f3da4914ebb97fb0b144a0bc7024dbe2a1c29ae8bb69b61faf465bb4a2d2c7fffd1adca200e5375f7d63b4ff7695161a42fa
-
SSDEEP
6144:0wZnDlMy6O3qKmCRUe1B5uLqcHfVDNUV3nJGM+BTa:HtDlb6IqXCRUe1BTcH8VIM+Va
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack001/commenti_14032023.doc office_macro_on_action -
Processes:
resource static1/unpack001/commenti_14032023.doc
Files
-
commenti_14032023.zip.zip
-
commenti_14032023.doc.doc windows office2003
ThisDocument
Module1