Behavioral task
behavioral1
Sample
TT PYMENT COPY.doc
Resource
win7-20240221-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
TT PYMENT COPY.doc
Resource
win10v2004-20240419-en
8 signatures
150 seconds
General
-
Target
TT PYMENT COPY.zip
-
Size
20KB
-
MD5
6c3e20f16bb359fb22557004478366f9
-
SHA1
2a429da20afbc5dc6e21b681fd4d89384caa310b
-
SHA256
67dda85b8fcccfa131d203c066116de63e431fd9d2b2cb4651260f426a0d24de
-
SHA512
f47d4fa4956e36499dc667b04e11db0805014a93d02fb4515118e534820b6049d3cd93540cba6dae725279443f9af2b92ad86162ac1d05eaca5a668519bc0d85
-
SSDEEP
384:4+KwQBnfS5PBpXlb5P3L34qjPvx2FILv1A0L8UlkwdPecZO0ZYU8oPa7+l:MJN65PrztR8ILiY8UlPJvZO6YU1Pbl
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/TT PYMENT COPY.doc office_macro_on_action -
resource static1/unpack001/TT PYMENT COPY.doc
Files
-
TT PYMENT COPY.zip.zip
-
TT PYMENT COPY.doc.doc windows office2003
ThisDocument
NewMacros
ThisDocument
NewMacros