Behavioral task
behavioral1
Sample
954895897851030__2023-08-03_0953.doc
Resource
win7-20230220-en
windows7-x64
12 signatures
600 seconds
General
-
Target
Bucidaengineering.7z
-
Size
146KB
-
MD5
bc25cd0dd54c7b9577b85f9d4791474f
-
SHA1
8ee5d12191144b8f9640df54620af3a345e8ca32
-
SHA256
2f4a7d026c4085d8a4a8ce49a6a0c0811709967063c6300a4ba5b56951c63a85
-
SHA512
d8f3f316204b83af0bada5c50087108bb5432cdb201bbab0bd61ff1e14c495ba554e658b18aa9629ee1f8de96cc2e6e4a65203e35dafa30f12c58b9195b6076b
-
SSDEEP
3072:R66bv5WznKXlMQg7vfVxnr2T2RGnSjPXMojg/tINsyq/asUfFjldrTniMvT:TbB2KXlMtvd41n6Mojg/WNsTysEldr7h
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack002/954895897851030__2023-08-03_0953.doc office_macro_on_action -
Processes:
resource static1/unpack002/954895897851030__2023-08-03_0953.doc
Files
-
Bucidaengineering.7z.7z
Password: infected
-
Bucidaengineering.zip.zip
-
954895897851030__2023-08-03_0953.doc.doc windows office2003
ThisDocument
Module1