Behavioral task
behavioral1
Sample
d7e61d7d1f31426d1c59eeab4e60fdd433b6889a548b94129e0ae34fb766a7cf.doc
Resource
win10-20230220-en
windows10-1703-x64
5 signatures
150 seconds
General
-
Target
d7e61d7d1f31426d1c59eeab4e60fdd433b6889a548b94129e0ae34fb766a7cf.doc
-
Size
316KB
-
MD5
bbffa9ec65fa9d04f8642883dda0b382
-
SHA1
ecb2635f063d3b9e6ce58f5f3b634a4c9133fb88
-
SHA256
d7e61d7d1f31426d1c59eeab4e60fdd433b6889a548b94129e0ae34fb766a7cf
-
SHA512
6d8ff967e88200b846fcbd17506a5c9df548cda33e8033bf0ac3a43de48341b58df52199b7ebe4e6b0b4140238342da9477a5ae64c77a8040e244a19095a37d7
-
SSDEEP
6144:xPn4VZXbatu7MDogsDkHS50LdfcGcbz1f5M9KTFrMpSlMK3Ru+Q28:xP4PbNMkgg3Ru+x
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
d7e61d7d1f31426d1c59eeab4e60fdd433b6889a548b94129e0ae34fb766a7cf.doc.doc windows office2003
ThisDocument
Module1