Behavioral task
behavioral1
Sample
tragedy_redux.zip
Resource
win10-20230915-en
windows10-1703-x64
9 signatures
1200 seconds
General
-
Target
tragedy_redux.xlsm
-
Size
23KB
-
MD5
3abfa64598fb01ce7130bab6f24d4ea8
-
SHA1
a1d8f1e0613286f279506a1fbd1bdb75c2f27ecc
-
SHA256
f03e0df31b16d4dd954918c496a24107c69a6468be1f2703fe56ef1f91118e47
-
SHA512
94340fbf262d32177c94f39ca4e1985b457508ae80ea361341640f1d396f883d65a31b220966ee86a111dd14b79076dfabf3e9967cfa9aa74597439c875489ea
-
SSDEEP
384:NiLBYSEK0YBM2oK1KUs1IdXJCtmqpwcdSDat2aEkRmhudj/hv/6iMLPj4:NkBYDYM27A8XJC8qpwcdSet0up/ZSiMQ
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/word/vbaProject.bin office_macro_on_action -
resource static1/unpack001/word/vbaProject.bin
Files
-
tragedy_redux.xlsm.zip
-
_rels/.rels.xml
-
docProps/app.xml.xml
-
docProps/core.xml.xml
-
word/_rels/document.xml.rels.xml
-
word/_rels/vbaProject.bin.rels.xml
-
word/document.xml.xml
-
word/fontTable.xml.xml
-
word/settings.xml.xml
-
word/styles.xml.xml
-
word/theme/theme1.xml.xml
-
word/vbaData.xml.xml
-
word/vbaProject.bin.doc windows office2003
ThisDocument
NewMacros
-
word/webSettings.xml.xml