Behavioral task
behavioral1
Sample
469219a2cdd12992fe5fb346773dfb4e4aa33fa9e824f51f71c27cc576a648ca.xls
Resource
win7-20230220-en
windows7-x64
9 signatures
150 seconds
General
-
Target
10751116774.zip
-
Size
414KB
-
MD5
8a0c7da9bb36652189275f850f8d0118
-
SHA1
53fc757d5bd1fd0828ce21aafcaa3089e23d6d6f
-
SHA256
4565019233df1bda4ea276995165bafdfc15d5b3fb22347c4b97aa8e21a26324
-
SHA512
8436fd0f3d367dd973e354d2cfb1658e596c230547d5d43a858cabed20c14e9018197bebb85bcd1a9baecbfeac231064d84a1edf82ae6d99f9452a0644110137
-
SSDEEP
12288:ii36D29s+Pl5A07eyr4EDh+J6ACqUR1tQuHGF366:i129s25A0ayr4BApu/q6
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/469219a2cdd12992fe5fb346773dfb4e4aa33fa9e824f51f71c27cc576a648ca office_macro_on_action -
resource static1/unpack001/469219a2cdd12992fe5fb346773dfb4e4aa33fa9e824f51f71c27cc576a648ca
Files
-
10751116774.zip.zip
Password: infected
-
469219a2cdd12992fe5fb346773dfb4e4aa33fa9e824f51f71c27cc576a648ca.xls windows office2003
Kangatang
ThisWorkbook