Behavioral task
behavioral1
Sample
PO#065.doc
Resource
win7-20231020-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO#065.doc
Resource
win10v2004-20231020-en
windows10-2004-x64
15 signatures
150 seconds
General
-
Target
PO#065.doc
-
Size
315KB
-
MD5
a5668dccaaaf2f7f6dcd64602b380363
-
SHA1
5a0ec0e8546108ddba53a8ea8d593feca52c076c
-
SHA256
9425175e94bf2958bec3bf42565ddb2a32263a20d56ae0afe6bc79238f57b678
-
SHA512
b2ceffc33a57b98f0baf647f841ec5c1453444e20a690dae6a819421b515d3f15dfaab01d26a9a0104361d8c9e9c04996f3f1eeb25c98f900f4af06be1094bbf
-
SSDEEP
6144:1/kNKK8pH+Guie918mj20i/k/knnyxChUS2YbxITUi5LSEXpa/5AB6Aqiu:VksTcjK0+nw6vtxITj++rB6Ag
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
PO#065.doc.doc windows office2003
ThisDocument
NewMacros