Behavioral task
behavioral1
Sample
form_1101816099_11012021.xls
Resource
win7-20231215-en
9 signatures
1800 seconds
General
-
Target
211102-3svm6acgf2_pw_infected.zip
-
Size
529KB
-
MD5
10044b81f3b90e852853b9508c8db065
-
SHA1
b79aa006e575ad35577b00fff1574b1679a9557c
-
SHA256
31a2523b5f844c42e3661c92d3e2ed1b45dfa1f544e61dec6548b071ef81b1c2
-
SHA512
f4e684e36ece389c54d2c1f2f643784c642e1b63d5d3eb846345841a758f8270bed417ee0a37a6f168464635edec867222ad4a1b874dd59e96406b62eef6646b
-
SSDEEP
12288:UBqle6nhk3L045Ty51oeJZg8Qu3Bte8oZb7ORJEhTEHuXUMS9X+Uv:UBDChUg45Ty52ePg8jBtboZb7ORJEmH1
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/form_1101816099_11012021.xls office_macro_on_action
Files
-
211102-3svm6acgf2_pw_infected.zip.zip
Password: infected
-
form_1101816099_11012021.xls.xls windows office2003