Behavioral task
behavioral1
Sample
8e57f0d1c879f23a5c4c9bfb7c72130e.doc
Resource
win7-20231129-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
8e57f0d1c879f23a5c4c9bfb7c72130e.doc
Resource
win10v2004-20231215-en
9 signatures
150 seconds
General
-
Target
8e57f0d1c879f23a5c4c9bfb7c72130e
-
Size
269KB
-
MD5
8e57f0d1c879f23a5c4c9bfb7c72130e
-
SHA1
64c5a15683e760533e31960b1b311fb344d04f02
-
SHA256
c2140753abe2aa32e3cc6e584262d9c1b0023924a7931598159e8f8876c93372
-
SHA512
42f2b1a227cadb09d0757dd13bd8072b6f0b21c68881fb0af9fa25aea891cd28ec10609adae7f66e82d16e591a79cfd1433ba1d9b7210c6ad05f02fae2ed7a09
-
SSDEEP
6144:f1C4iW3u+x60/sx08ZjOxPCY8Git3w8yRhi7l:f18W3u+xrEx/qPCjGwOh0
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
8e57f0d1c879f23a5c4c9bfb7c72130e.doc windows office2003
ThisDocument
Module1
NewMacros