Behavioral task
behavioral1
Sample
3b8575cc861daef95d7278cfe602fdff3e90c1520fdb9ab94e31bc3cd520c4cc.xls
Resource
win7-20230220-en
6 signatures
150 seconds
Errors
Reason
office: non-rc4 encrypted document not supported
General
-
Target
10756896982.zip
-
Size
878KB
-
MD5
28ea0749c0e3986cac20945a3dd6c3c7
-
SHA1
878051a83ee69936de9dda5ed0223ebca9277710
-
SHA256
ae959314a3a11ea7452f4cd0dfa1675cc3ae272802f10bbf6f689a23d913c0ed
-
SHA512
a7e76aa523b39751bb437d18128e7cfa8e93190b27833462a69a52b314f963d6491e31f9c82b35203090663d8226ffaf9463adee40d24df0d028a3e25931e39a
-
SSDEEP
12288:VxKqt/7XqJ8Un7l1b5vuXj/EBJJC1Q3+aK1JsE5vsxD7p0b26/6IhT76dF:VvRzhUn7JurU53twWHRpv6rEF
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/3b8575cc861daef95d7278cfe602fdff3e90c1520fdb9ab94e31bc3cd520c4cc office_macro_on_action
Files
-
10756896982.zip.zip
Password: infected
-
3b8575cc861daef95d7278cfe602fdff3e90c1520fdb9ab94e31bc3cd520c4cc.xls windows office2003