Behavioral task
behavioral1
Sample
d225efab3cf8f751c299accb3f114e9b.doc
Resource
win7-20240221-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
d225efab3cf8f751c299accb3f114e9b.doc
Resource
win10v2004-20240226-en
windows10-2004-x64
15 signatures
150 seconds
General
-
Target
d225efab3cf8f751c299accb3f114e9b
-
Size
612KB
-
MD5
d225efab3cf8f751c299accb3f114e9b
-
SHA1
fdabc9901ed3b774b106859f4c5c0c3c1dcf1aef
-
SHA256
2ae278b49a16340323666bc486a2686491391374365393142e44a25c16b29465
-
SHA512
c0656fa0af6391c2568efe70b1b9ee0120eace96575f0c04ceea9d77aa94b6941b682257585097cef8fb661bf5944f9ab69792aa413173cb6300d361828bc672
-
SSDEEP
12288:EV9iQsDr8N5eCz3DFw7m/kdxoF3aHUp6BvNoywaMFsZjjotAd5Rs+:EVXkr8N8Cz6voFqDisSIj
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
d225efab3cf8f751c299accb3f114e9b.doc windows office2003
ThisDocument
Module1
Module3