Static task
static1
Behavioral task
behavioral1
Sample
d60f4f05c48c778ad9434ea64f0c83e9202d38ef8e1d9fb4502bff6aeac24f36.doc
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
d60f4f05c48c778ad9434ea64f0c83e9202d38ef8e1d9fb4502bff6aeac24f36.doc
Resource
win10v2004-en-20220112
General
-
Target
d60f4f05c48c778ad9434ea64f0c83e9202d38ef8e1d9fb4502bff6aeac24f36
-
Size
521KB
-
MD5
e1bfd913888da72cd36d8f559efb5a30
-
SHA1
2ff8795fbc06d5323f018a6279f9d75ef4c65048
-
SHA256
d60f4f05c48c778ad9434ea64f0c83e9202d38ef8e1d9fb4502bff6aeac24f36
-
SHA512
f2552838061d8fec4b88df40d171b95b3339d6fcc62c60389064ccfc63c72441aef461441e5fff0529301553c75ed85d3d586fa2d9184ee29c3d80db691142a0
-
SSDEEP
12288:HV9iQsDr8NNwxpAMtKFcNoxPWcVQ663qV9o1MczEe5bm:HVXkr8N6PAmKFesE663P1Mfetm
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action
Files
-
d60f4f05c48c778ad9434ea64f0c83e9202d38ef8e1d9fb4502bff6aeac24f36.doc windows office2003
ThisDocument
Module1
Module3
Module123345