Behavioral task
behavioral1
Sample
legit.doc
Resource
win7-20231215-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
legit.doc
Resource
win10v2004-20231222-en
8 signatures
150 seconds
General
-
Target
legit.zip
-
Size
12KB
-
MD5
fa8de42f0566729c8152f8e4b144d4e2
-
SHA1
80b5fbd1efc4cbaeb69c967a663c06890ab225b3
-
SHA256
bd0db5eec0c550d05423f464bb43103f28e9016a574fb8439e42e0ac84d3861b
-
SHA512
2d70df8722f5c08d6d5190773982545b956c4f6332d702b221b52e5b57bdbabe4097a7a6f766eb6c9bbdd95a4ec03275ec550c005bdae35d6d0da4832535fb0b
-
SSDEEP
192:lO8L4cWF3CM9qdnFXh0dmaeDCOSM1lh6MAFW2vN/pOlVlI0lXulOfTs8h2rN:lOA4ci3HoXhVaE0deaWeIRh2h
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/legit.doc office_macro_on_action -
resource static1/unpack001/legit.doc
Files
-
legit.zip.zip
Password: M3taCTF
-
legit.doc.doc windows office2003
ThisDocument