Behavioral task
behavioral1
Sample
6a06c7c9654a31d646252bc78233c852466029563add6951ce2372562bb4b095.doc
Resource
win10-20230220-en
windows10-1703-x64
5 signatures
150 seconds
General
-
Target
6a06c7c9654a31d646252bc78233c852466029563add6951ce2372562bb4b095.doc
-
Size
290KB
-
MD5
acb69d8b607be094929a23521d736863
-
SHA1
07fc77d002fc42abfcf5a06c1010a9909eee7ca9
-
SHA256
6a06c7c9654a31d646252bc78233c852466029563add6951ce2372562bb4b095
-
SHA512
1127c923b0c082f6a4747da2957e47655ea03a549340a7d176c18e79d5b32e2864634e533cb73e147d835b928a1c2d13fba0734de26d299c7f1cc7b40e6e2c20
-
SSDEEP
6144:ds9t1R0KTDGA8F85WTV0eIqJGER+TOiI7YhZvKA:GTH0kStFaWbJGER+3jX
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
6a06c7c9654a31d646252bc78233c852466029563add6951ce2372562bb4b095.doc.doc windows office2003
ThisDocument
Module1