Behavioral task
behavioral1
Sample
96bb7c2cde000f77d746003c0b22440f45a6676a8fa4169c806a83de93abaa84.xls
Resource
win7-20230703-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
96bb7c2cde000f77d746003c0b22440f45a6676a8fa4169c806a83de93abaa84.xls
Resource
win10v2004-20230703-en
9 signatures
150 seconds
General
-
Target
11091147519.zip
-
Size
66KB
-
MD5
d44890baac185dbd4c3d85be97eedb31
-
SHA1
bbdb88ce1d3f471f3e1be6460f3972614daa9a96
-
SHA256
2b5fd6eb7a44907b2f85fb4a0867171194349355b585f9c334c471fe357c1b41
-
SHA512
e5342f25a84452ec689909bcf540ba70a3ffcfdc26175ce08e2649ff0f3f64366d18b4b6dd28315a41e163130c9dfff75739eb132cecca68e5da46f5598be0af
-
SSDEEP
1536:E3ssSRfBc00Xy27u4xePfuRdR5X1jGR82:QRSfW00C27uBedJpGRZ
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/96bb7c2cde000f77d746003c0b22440f45a6676a8fa4169c806a83de93abaa84 office_macro_on_action -
resource static1/unpack001/96bb7c2cde000f77d746003c0b22440f45a6676a8fa4169c806a83de93abaa84
Files
-
11091147519.zip.zip
Password: infected
-
96bb7c2cde000f77d746003c0b22440f45a6676a8fa4169c806a83de93abaa84.xls windows office2003
ThisWorkbook
Sheet1