Behavioral task
behavioral1
Sample
854.doc
Resource
win7-20230220-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
854.doc
Resource
win10v2004-20230220-en
12 signatures
150 seconds
General
-
Target
854.zip
-
Size
690KB
-
MD5
e71b6d8fabfbca3f435ac92bdcbc04e6
-
SHA1
3c9eb902b317f50a41cb7be00ede34c68d63e640
-
SHA256
734251386beca06826ed062be09039e8a33bf20694cea4eece0b64a024dc4afb
-
SHA512
92ca0b4d6f868682006a4a4c25f1821e05fee350007eac418308e845a97b7ea231c1200315bba6bab87ccc73b908995bc8c96f6d219a37e4d29f1ef1ba058ca0
-
SSDEEP
6144:4P/mYiuwND6sXVrg561q/bqdjn4qwZwBI:yMhtV8Q1q/bCr4qwZoI
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack001/854.doc office_macro_on_action -
Processes:
resource static1/unpack001/854.doc
Files
-
854.zip.zip
-
854.doc.doc windows office2003
ThisDocument
Module1