Behavioral task
behavioral1
Sample
f98378693c86be4888f68b688c9733596a01dc55dc9f8600b4bb8d29f2477fd6.doc
Resource
win11-20231222-en
windows11-21h2-x64
1 signatures
150 seconds
General
-
Target
20240105_1_Kaunas_Doc.zip
-
Size
56KB
-
MD5
af0f55905d83ede5af7ee6981530b8fe
-
SHA1
63ee7be703e635d2f42d7d4c2e40378d8d2beda6
-
SHA256
e1f52a1a824246b2dbe89b298429b3f9cdd81837539db4de5ebfeaa7aed63f6b
-
SHA512
83b2d478eb6c1b0efa20751a2220670bbde558eb018299ff1454193bc31293ea30ce9d0b71558649c3a60d44020d6231c1c63c31e7ac5a6154cc560eb26870e2
-
SSDEEP
1536:bwCIQ/Mo3cs4gIDOSDGC16lZvnTqF2zWc:bqQko3cGIUi6lhuQj
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/f98378693c86be4888f68b688c9733596a01dc55dc9f8600b4bb8d29f2477fd6 office_macro_on_action -
resource static1/unpack001/f98378693c86be4888f68b688c9733596a01dc55dc9f8600b4bb8d29f2477fd6
Files
-
20240105_1_Kaunas_Doc.zip.zip
Password: infected
-
f98378693c86be4888f68b688c9733596a01dc55dc9f8600b4bb8d29f2477fd6.doc windows office2003
ThisDocument
qlfgysbla
uvkebkmzg