Behavioral task
behavioral1
Sample
089c846d6e0e740ee0a4a8b3bd409cad.doc
Resource
win7-20231129-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
089c846d6e0e740ee0a4a8b3bd409cad.doc
Resource
win10v2004-20231215-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
089c846d6e0e740ee0a4a8b3bd409cad
-
Size
612KB
-
MD5
089c846d6e0e740ee0a4a8b3bd409cad
-
SHA1
2ba96ba3055f35ce4c5b8d7acc5b99c11db02986
-
SHA256
7336cd3bd33bed303b35a019ad2e354bc2a2bb3249291ba9cd2eb98ecf7bfedf
-
SHA512
10b6ca55383aaa307246963870b293a757a22774a2f2d91698aab9e2f2355b134b9046da05a94866cc547d039ee10b3e5382c2e70976a08e134b9af005e2184b
-
SSDEEP
12288:AV9iQsDr8NReCz3DFw7m/kdxoF3aHUp6BvNoywaMFsZjjotAd5Rsm:AVXkr8NUCz6voFqDisSI7
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
089c846d6e0e740ee0a4a8b3bd409cad.doc windows office2003
ThisDocument
Module1
Module3