Behavioral task
behavioral1
Sample
052cdc6e6a237d6c19bf571b05b7c6ea51330a42d51b7fe79b042941b5015430.doc
Resource
win7-20231129-en
11 signatures
150 seconds
General
-
Target
VirusShare_2f11116507eb5d3fba0a7be4bad7fbd4.zip
-
Size
147KB
-
MD5
420fa7bc69598755103025611c4e9f7a
-
SHA1
2d0dd32044b41993ab20941fff6bab8d0622d8f3
-
SHA256
5704bdc9114a90ea6bbb97b736d138887300b29ef5cbd4a59a5c31c75df60beb
-
SHA512
fafd75f33ba8a4d9b4a9525789847a5a827a40b08c5a896349fb93a2d2a5bf73e2300f5caed5fc2a36f019e2a1ba30101c3947f334cebae932e1021c468e05f6
-
SSDEEP
3072:n+wBv1TwJgp7xno8mCXkWOBE0JZ0giic0Lfo1IOG0XyCZ6V:+AogctCvOBEtYwGOGsD+
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/052cdc6e6a237d6c19bf571b05b7c6ea51330a42d51b7fe79b042941b5015430 office_macro_on_action -
resource static1/unpack001/052cdc6e6a237d6c19bf571b05b7c6ea51330a42d51b7fe79b042941b5015430
Files
-
VirusShare_2f11116507eb5d3fba0a7be4bad7fbd4.zip.zip
Password: infected
-
052cdc6e6a237d6c19bf571b05b7c6ea51330a42d51b7fe79b042941b5015430.doc windows office2003
ThisDocument
cqTXrplDpUnSQG
fDVwVUAHGp
JsViKbc