Behavioral task
behavioral1
Sample
3861_97384.doc
Resource
win7-20230220-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
3861_97384.doc
Resource
win10v2004-20230221-en
12 signatures
150 seconds
General
-
Target
3861_97384.doc
-
Size
534.4MB
-
MD5
cf3838fc76086249c9c58b7112739152
-
SHA1
42461186f63f10eeaba8979339c536b83668afbe
-
SHA256
ecb30e7fe7b8c6c8267be45cfaea5adb0d1954f116d7cc57400b21027ff16585
-
SHA512
0b89a5a81eac54728b8b88a99d7b049fd2881da4a8740f6fb3ad144488f86666764e069864c18b969a81c840322bab70cb17b5629bdf6ec2b69109621488b60f
-
SSDEEP
6144:zZRtBPT4N/uQaNULlPUvauNTklB7ShcbYdFf8UOPv:zZvJhfKd2amwYdKUq
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
3861_97384.doc.doc windows office2003
ThisDocument
Module1