particulars 12.20.doc
Classification: Malicious
particulars 12.20.doc is a malicious file sample (application/vnd.openxmlformats-officedo…, 91.7 KB). Linked to Icedid malware.
Detection summary
- 0 antivirus detections (21% detection ratio)
- 0 IDS alerts
- 4 processes observed
- 0 contacted hosts
- 1 DNS requests
MITRE ATT&CK associations
Malware families: ICEDID (S0483)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| BehavesLike.Downloader | Hybrid-Analysis | 2020-12-10 02:30:13 | 2020-12-10 02:30:13 | ||
| IcedID | Abuse.ch | 2020-12-10 01:51:12 | 2020-12-10 01:51:12 | malicious-activity | S0483 IcedID |
Tags
macros-on-openSample information
- Filenames
- file, particulars 12.20.doc
- File type
- application/vnd.openxmlformats-officedocument.wordprocessingml.document
- Size
- 93895 bytes
- MD5
5ce909920e6006b358ebe30b37880aa4- SHA-1
cbbbd2f5f1702853ca5b7cceae280d92b5d3d245- SHA-256
c4275b08193c896015c7bcda2a4e0d940331b0806c6b32a68e32acbf78988075- First indexed
- 2020-12-10 02:30:13
- Last updated
- 2026-10-09 02:49:14
DNS requests
Process list
| Name | Command line |
|---|---|
| WINWORD.EXE | /n "C:\file.doc" |
| rundll32.exe | url.dll,OpenURL %PUBLIC%\index.hta |
| mshta.exe | "%PUBLIC%\index.hta" |
| rundll32.exe | %ALLUSERSPROFILE%\aMIlcj.pdf,ShowDialogA -r |