Behavioral task
behavioral1
Sample
Doc1.doc
Resource
win7-20231023-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Doc1.doc
Resource
win10v2004-20231023-en
8 signatures
150 seconds
General
-
Target
dc2ea672e2782bc204001903c926f5ca.bin
-
Size
13KB
-
MD5
dc2ea672e2782bc204001903c926f5ca
-
SHA1
4f397d66a44d59af7a009546d002c847b712acbd
-
SHA256
c38bb34658c8a6ee1eaf6f4a4cb7d928dce8b842d7ec97b9cb8fe043761c04c2
-
SHA512
a6c9454108222ae0038d0d41476ddd8d61b714f8cdb2e671b035d17932789d484e7296af61b3f366de9c4c9a5dd3be665f0402818556b42b0463cfe2645f1a45
-
SSDEEP
384:qYmAd6pepOAqHVy1jRVlSOMN8wkPKFtDu2zfX5z:eLu8oj4OU8wi6DzfX5z
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/Doc1.doc office_macro_on_action -
resource static1/unpack001/Doc1.doc
Files
-
dc2ea672e2782bc204001903c926f5ca.bin.zip
Password: infected
-
Doc1.doc.doc windows office2003
ThisDocument
NewMacros