Behavioral task
behavioral1
Sample
S1_VBA1/vba.doc
Resource
win7-20231215-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
S1_VBA1/vba.doc
Resource
win10v2004-20231215-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
0796a3339d2c5c96d36be03c0dfd5431.zip
-
Size
1.6MB
-
MD5
0796a3339d2c5c96d36be03c0dfd5431
-
SHA1
a6ffc282d8c93dd90f9cfb9277bbffe76faab656
-
SHA256
0b6fdb4f3a7007636b485ddb8148e2b8f89326346841d21e55dd1f3e4ac32794
-
SHA512
0a6b56a335c24c69f739873a801723844d41eeb26ebae7b7808e834e70a2d340e8957b62f08e6e34d60bd3dbee7a626eb27ab69f82f415b7b0023292be3f4fd6
-
SSDEEP
49152:nQaMZPpDGDBcqsHdOiDPACitxulGOwqrN8:QdZPGcqsHUntxAGOwqJ8
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/S1_VBA1/vba.doc office_macro_on_action -
resource static1/unpack001/S1_VBA1/vba.doc
Files
-
0796a3339d2c5c96d36be03c0dfd5431.zip.zip
-
S1_VBA1/vba.doc.doc windows office2003
ThisDocument
Module1