Behavioral task
behavioral1
Sample
DATA_862550248.doc
Resource
win7-20230220-en
windows7-x64
12 signatures
150 seconds
General
-
Target
DATA_862550248.zip
-
Size
678KB
-
MD5
9c2d88d20a0eaa6c24ffa7908e541293
-
SHA1
af637075c5c9a9b0be449c0b6bb4b0ec0143386c
-
SHA256
ae27f05aaa2c64baa9ad2024e312792c64927cab41213aa00f098fa1f99786ca
-
SHA512
fbc82d8528cd841b11cddb635d3799d17152382d6ec4a4c012e24a709166c61dbae9acea83683f9cf953561a68ef82637dee2c22e9640092f66472b5225dd4da
-
SSDEEP
3072:LmGWTiRHYAaxkY9HRiE5vsTDBBoBdk5wu9MzKjzAUaIQxBV5b:buAaxprW/+uRjzwt
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack001/DATA_862550248.doc office_macro_on_action -
Processes:
resource static1/unpack001/DATA_862550248.doc
Files
-
DATA_862550248.zip.zip
-
DATA_862550248.doc.doc .js windows office2003
ThisDocument
Module1