Behavioral task
behavioral1
Sample
81c4485a834880c3becd7e3eefd841a3.doc
Resource
win7-20231215-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
81c4485a834880c3becd7e3eefd841a3.doc
Resource
win10v2004-20231215-en
windows10-2004-x64
15 signatures
150 seconds
General
-
Target
81c4485a834880c3becd7e3eefd841a3
-
Size
850KB
-
MD5
81c4485a834880c3becd7e3eefd841a3
-
SHA1
a1d76eaf5c4f787fc34528e46dc9cda5d9d5ea28
-
SHA256
87df253ffe9d319d5a315b3361a1d13553c3bc4bf233e5c93a8624b5993f4abe
-
SHA512
09076ecc53e4ad0d27c783918ca6c74dbf81cdb11c47c232afe8044e372aeb4920a488e1320c0cad9267d2fb747e2dc3e9e7c265021bba6b3dbec14daffe104f
-
SSDEEP
12288:OB+jxjYxBs/RPYdf2aCQeg1Mfpfm6ukJm9voPZqXStgi2Tz:OSjeG/usvQFMfQmJmVsZ/C/
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
81c4485a834880c3becd7e3eefd841a3.doc windows office2003
ThisDocument
Module1
Module3
Module123345
Module2