Behavioral task
behavioral1
Sample
Message_1703.doc
Resource
win7-20230220-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Message_1703.doc
Resource
win10v2004-20230220-en
windows10-2004-x64
12 signatures
150 seconds
General
-
Target
Message_1703.doc
-
Size
516.4MB
-
MD5
27217dc7491a19cb456cec0b80dd4070
-
SHA1
d3df2a5600d677cb6547fe0e9eae8cc5e055b575
-
SHA256
53207c58f6fc4a7674c21555684453831e02bbe902207b2fc114ab08e9fead34
-
SHA512
f883b8ddfd535a5976f7362b14ce4bd1dc88b1520ae8d8628dc23d948941fca33d42db7f59f728ec721508f148d621315f0326a8e1a2b87268745836d437bd98
-
SSDEEP
6144:zZRtBPT4N/uQaNULlPUvauNTklB7ShcbYdFf8UOPv:zZvJhfKd2amwYdKUq
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
Message_1703.doc.doc windows office2003
ThisDocument
Module1