Behavioral task
behavioral1
Sample
9b808789a88144a32f8fd036138403a7235c834f3b3bf5ebbcd22ac4610d32cf.doc
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9b808789a88144a32f8fd036138403a7235c834f3b3bf5ebbcd22ac4610d32cf.doc
Resource
win10v2004-20230220-en
General
-
Target
9b808789a88144a32f8fd036138403a7235c834f3b3bf5ebbcd22ac4610d32cf.doc
-
Size
2.8MB
-
MD5
3fd6aaed6aa4fd6fae42ffc02d4fe52a
-
SHA1
642c92a15fb9b0e9a82d15fdd52c2c92270a4eeb
-
SHA256
9b808789a88144a32f8fd036138403a7235c834f3b3bf5ebbcd22ac4610d32cf
-
SHA512
be44cf715020c3f0e0a78dcec45038b4743e3f9e0b48fc4b9c583c06f93d975e0f52a0781c4722194145528f991f338c4056dea8106ea1c45412349b24d790be
-
SSDEEP
3072:ic8fJkkgynfEv91qh2g4PPHy/q/4mJ9cYNxtE1CeNIyZg1HFZr:iNJkkgo264PPHNjJWSMTGyZaH7r
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
9b808789a88144a32f8fd036138403a7235c834f3b3bf5ebbcd22ac4610d32cf.doc.doc windows office2003
ThisDocument
form3
form1
form2