Static task
static1
Behavioral task
behavioral1
Sample
remocsinfectedrat.zip
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
remocsinfectedrat.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
e8f03287c51f6b2992c960c487de1b74d64571a590ce84de7aced738516d699c.docx
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
e8f03287c51f6b2992c960c487de1b74d64571a590ce84de7aced738516d699c.docx
Resource
win10v2004-20240802-en
General
-
Target
remocsinfectedrat.zip
-
Size
75KB
-
MD5
46560a888092613fb26475ac147dc762
-
SHA1
2b9102f1117f01b62c8c891cf0222242119095f7
-
SHA256
b9013dce33e3060d11688ac05da3432f7d45fa1c2b09d553b46cee2381a37481
-
SHA512
525f8a21bb21e1fa268c65114b9ae821f400420117d4cc85236bbc3d45ba63cd508a475d53589834237e0355a990d6ecd7e2a437d62215b0d6df0afe41d0cc4a
-
SSDEEP
1536:GyKqs7XCckiK9eGOMMUk4mPEzuOHWiLLzTIB1PR33rA:GyKTQiKMGOZ4puOH5LEB1P1rA
Malware Config
Signatures
-
Office document contains embedded OLE objects 1 IoCs
Detected embedded OLE objects in Office documents.
resource yara_rule static1/unpack001/e8f03287c51f6b2992c960c487de1b74d64571a590ce84de7aced738516d699c.doc office_ole_embedded
Files
-
remocsinfectedrat.zip.zip
Password: infected
-
e8f03287c51f6b2992c960c487de1b74d64571a590ce84de7aced738516d699c.doc.docx .doc office2007