Behavioral task
behavioral1
Sample
f2223fd8fdb43f67100be671bd8bc3c7e7c056c4681011d5ac51cddd1b038696.xls
Resource
win7-20230220-en
6 signatures
150 seconds
General
-
Target
10324512838.zip
-
Size
130KB
-
MD5
6b7a9f9266414405e681fdc30074376a
-
SHA1
8b6371f3508b39b5da8e0ac9c6d0988e7f271d1a
-
SHA256
abd9c4621780a063dcb3a78cf64e654147224b9afb51304fb27cc5205fc05db8
-
SHA512
5cfa2aa70ef897b6a8d0f2ebce63f5591208940f4d89582d8e6cfd2ea8d8438f29d3b38248b03295bddbe5cd3a6cbe61646b92341485d66adcaec47a37835a87
-
SSDEEP
1536:MYsWdsuLrwKuOE8hKfqQAtPOZzzaQGURJmzNU1sdVVA8mcX8KLQdYXs+i7SJTB4t:M8dsuiz8ypzaEPmzNtVVvyii7oT5vnKT
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/f2223fd8fdb43f67100be671bd8bc3c7e7c056c4681011d5ac51cddd1b038696 office_macro_on_action -
resource static1/unpack001/f2223fd8fdb43f67100be671bd8bc3c7e7c056c4681011d5ac51cddd1b038696
Files
-
10324512838.zip.zip
Password: infected
-
f2223fd8fdb43f67100be671bd8bc3c7e7c056c4681011d5ac51cddd1b038696.xls windows office2003
ThisWorkbook
Sheet1
Sheet2
Sheet3
MainMenu
ArgDataCls
ArgParametersCls
ArgParametersCol
CellCls
CellCol
Conversions
CTDataCls
CTDataExCls
EnumConversionsCls
FuncListCls
FuncListCol
FuncListDetailsCls
FuncListDetailsCol
FuncListsCls
FuncListsCol
ParamsCls
ParamsCol
RangeTableCls