official paper.12.20.doc
Classification: Malicious
official paper.12.20.doc is a malicious file sample (Word document, 77.2 KB). Linked to Icedid malware. 2 sightings from Abuse.ch, last seen 2020-12-10.
Detection summary
- 0 antivirus detections (64% detection ratio)
- 0 IDS alerts
- 3 processes observed
- 0 contacted hosts
- 1 DNS requests
MITRE ATT&CK associations
Malware families: ICEDID (S0483)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic.Malware | Abuse.ch | 2020-12-10 01:50:52 | 2020-12-10 01:50:52 | malicious-activity | |
| IcedID | Abuse.ch | 2020-12-10 01:50:52 | 2020-12-10 01:50:52 | malicious-activity | S0483 IcedID |
Tags
macros-on-openSample information
- Filenames
- official paper.12.20.doc
- File type
- Microsoft Word 2007+
- Size
- 79002 bytes
- MD5
1b1b78aed0518d2608786b0c0a5af9ef- SHA-1
472a23c627100d627c8f98bde78a5bd28bcb2545- SHA-256
34ff76103583c35bebe706f721e1e692a7c34b226eb32fa96de9dcd4c8db7ddc- First indexed
- 2020-12-10 03:15:08
- Last updated
- 2026-10-14 11:11:48
DNS requests
Process list
| Name | Command line |
|---|---|
| WINWORD.EXE | /n "C:\officialpaper.12.20.doc" |
| rundll32.exe | url.dll,OpenURL %PUBLIC%\index.hta |
| mshta.exe | "%PUBLIC%\index.hta" |