Behavioral task
behavioral1
Sample
YzlhMGI2.docx
Resource
win7-20230220-en
6 signatures
60 seconds
Behavioral task
behavioral2
Sample
YzlhMGI2.docx
Resource
win10v2004-20230220-en
4 signatures
60 seconds
General
-
Target
YzlhMGI2.docx
-
Size
4.7MB
-
MD5
2157d2c3b5ba5ae6fe5052353668234e
-
SHA1
ae01ca2cf0dc07abb3a7bef9930e38c9212975d5
-
SHA256
2bf088955007b4f47fe9187affe65fffea234ff16596313a74958a7c85129172
-
SHA512
20039f19970883f4397b20b1cacd528aae9134639967d70acbcefb513bf2360e7abd7bc2cb0aa9bdccbc9236bf498b50228cce0964d298ad8c332b42dd467787
-
SSDEEP
98304:W9Z5TVrZjNQ0Uc/8jkv0bcvcT/aveXD3H/zlLd:5
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
YzlhMGI2.docx.doc .docx windows office2003
ThisDocument
UserForm1