Behavioral task
behavioral1
Sample
【携程宏睿国际】招商局集团差旅云酒店预订服务合作协议.doc
Resource
win7-20240221-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
【携程宏睿国际】招商局集团差旅云酒店预订服务合作协议.doc
Resource
win10v2004-20240419-en
4 signatures
150 seconds
General
-
Target
【携程宏睿国际】招商局集团差旅云酒店预订服务合作协议.doc
-
Size
106KB
-
MD5
0c22ef10872f72ff7f60983ff472c032
-
SHA1
9f6977ab648c58eca13559010e00de9752af12d0
-
SHA256
b7cb4008d4af0767fd9cfd43e1321bb092419e3f634f016cc90014910b96b297
-
SHA512
358e0325b79990f8f1bc611243284b774dea59acd475f0d7ca4024dccf7948f25670979477271f516a34148d06fe7d3daece19cd9751cb25b780a12853f9e4e0
-
SSDEEP
1536:JCQnIKpPquVrvAV88V9Q1WOwnO84XCtN/Q6Bv:YI5tAVvGs3nO84XCtN/Lv
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action
Files
-
【携程宏睿国际】招商局集团差旅云酒店预订服务合作协议.doc.doc windows office2003