Behavioral task
behavioral1
Sample
Resume John Doe.doc
Resource
win10-20230220-en
8 signatures
1800 seconds
General
-
Target
test.zip
-
Size
27KB
-
MD5
68dd8a37a634510a6a94778c7e7dc199
-
SHA1
326f302c39d7eb91318f3c692acb6b55bc1de62a
-
SHA256
8fcb84ad3211a3766a6cfcc8b43a70efb3358f0df581edabf8b6bf2dd3a30333
-
SHA512
a2420aa2bac1001aef2ea28df235edb7e74db716cfa917dd9b0d12ecbfe3fe4b11d91ad0e97e7f4298cfcd8a80597743a285d40f923056e6da53e45a6898fd72
-
SSDEEP
384:ue49ARwI24XFst17+9XzldCjjtKzP9zl4epfIPNQGoWDCKBC2azxITcy85:uBSR9TCts9X+3tKdSepuQxg42azxKG
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/Resume John Doe.doc office_macro_on_action -
resource static1/unpack001/Resume John Doe.doc
Files
-
test.zip.zip
-
Resume John Doe.doc.doc windows office2003
ThisDocument