Behavioral task
behavioral1
Sample
Getting_going.doc
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Getting_going.doc
Resource
win10-20230220-en
Behavioral task
behavioral3
Sample
Getting_going.doc
Resource
win10v2004-20230221-en
General
-
Target
Getting_going.zip
-
Size
174KB
-
MD5
67366f74d0c98e9903b952a34b5dbc2f
-
SHA1
b8d15b99b5d48450a05daf8a81b393fedc083412
-
SHA256
f3392e444897b874c27f15d21c8af8dba7e7f1bb678da0881b00fb47a62ad121
-
SHA512
1bd5176dd9396901937ead5b81281bade88cc22cb17b01efbee6935c9e0d22b0cdfa58f3fbbcf56251da051a2d5d536c3b5257aac393d4f3b0a062a03222549c
-
SSDEEP
3072:6/VQ17zSY/mmFWzFKzdEjHjJ+KTQNYQbpX/CuwTwioGlI60LLtOhngy:4UzSY/H6Azd6HMK0NY4pX/CuMwVGu6G8
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/Getting_going.doc office_macro_on_action -
resource static1/unpack001/Getting_going.doc
Files
-
Getting_going.zip.zip
Password: helsectf
-
Getting_going.doc.doc windows office2003
ThisDocument
Module1