Managed XDR

00035521.doc — malware analysis report

File info

Filename
00035521.doc
File type
Composite Document File V2 Document, Can't read SSAT
File size
11.9 MB
First seen
Last seen

Environment

w10/x86 en

Hashes

SHA1
c1e6081df18d377347dd7058f5ea002c1370d3c1
SHA256
6930b88ebb7ab600624ad5383a5630f8fc6ab4c6af2ca5ee8b06317e79214f36
MD5
0beabf9f35e00c35970881cd4c453a05

Signatures

Execution

T1204.002 office_com_load: Microsoft Office loads COM DLL files (indicator of COM usage in macros)

Defense Evasion

T1497 evasion_trustrecords: Attempts to detect Sandbox exploring trusted documents

Discovery

T1497 evasion_trustrecords: Attempts to detect Sandbox exploring trusted documents

Other

yara_rules: Static rules
test_check_service: Starts services