General
-
Target
Scan 17032023.zip
-
Size
695KB
-
MD5
45c8addac33ebfb2a06a84eb71bf65c2
-
SHA1
6fd3d6b50238e503cf2b133b175b15fd513c2b4d
-
SHA256
8bd95be84e4e64fbb343ef9c9f2e47899c9677a5d4c041c51ef753a110903283
-
SHA512
26e711e94cba899cd672cecdae3c89e73afed399c1f509d108b80d3710f9d0e9639121c144c6334bf3552d9b5e6f0141adf2d57b4a05ffdddb5e272228edc51e
-
SSDEEP
3072:CSgWiG5Z++yxJU4djtxx0SA0cEaEwj5hsXk6h4x3OOPi+RA5KYncoJMf:CSXvl4djtxx0ucEaHiXkllOU9o/Af
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/Scan 17032023.doc office_macro_on_action -
resource static1/unpack001/Scan 17032023.doc
Files
-
Scan 17032023.zip.zip
-
Scan 17032023.doc.doc windows office2003
ThisDocument
Module1