Behavioral task
behavioral1
Sample
order_n3498_delivery-and-payment(2).docm
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
order_n3498_delivery-and-payment(2).docm
Resource
win10v2004-20240426-en
General
-
Target
order_n3498_delivery-and-payment(2).docm.zip
-
Size
42KB
-
MD5
af1828bbe6487407d4c8925910540500
-
SHA1
324e2a9820b30158ff636782898ed2e8c5e57ac1
-
SHA256
248e3612d2e46e98509154c03e1d9139bbf0cdfd26b0e1c56a5482bd86ac62b5
-
SHA512
c4cfd40888bc92077b1e0b8ed59eb9e89cad52387a11eb36e742d95fda1a332a84e54b1f7e427d775c3da3637149e3a2513395f9c03e90aefd99b82c545e6080
-
SSDEEP
768:TWLKr0CvszaFwkAafJZ+SkczwSvgUwUKKwTiQFfchECG7FpscwMCEkW9iY6+:TWLKrjszcbAaBg6kSIDiQFS2YNEkW9Bp
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/order_n3498_delivery-and-payment(2).docm office_macro_on_action -
resource static1/unpack001/order_n3498_delivery-and-payment(2).docm
Files
-
order_n3498_delivery-and-payment(2).docm.zip.zip
Password: infected
-
order_n3498_delivery-and-payment(2).docm.docm office2007
ThisDocument