Static task
static1
Behavioral task
behavioral1
Sample
9532743ba2305e568e69d5086a05da30436b30be733548c4d28222bfa9f456fa.doc
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
9532743ba2305e568e69d5086a05da30436b30be733548c4d28222bfa9f456fa.doc
Resource
win10v2004-en-20220112
General
-
Target
9532743ba2305e568e69d5086a05da30436b30be733548c4d28222bfa9f456fa
-
Size
322KB
-
MD5
4ca02d884e80c7333257d762e6964805
-
SHA1
85c47af2826ab8979b09df68a1ff5a7cb35fed42
-
SHA256
9532743ba2305e568e69d5086a05da30436b30be733548c4d28222bfa9f456fa
-
SHA512
e40819c9090c793644bfb52bba15ba346a20bbd2027dcd1e02935433777f8a3c8dc15dce278514ca024b35f559399b82d0419a390c674bcf7d93a463f1907980
-
SSDEEP
6144:P3VCgeFRmJMYjTkRFr8NWdWALmwk14ahRZMBE5opnz+6/yqjKGVz6Bn0t5Wj:PV9iQsDr8NLAqp14sZMFpKgylGVz6k
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource yara_rule sample office_macros
Files
-
9532743ba2305e568e69d5086a05da30436b30be733548c4d28222bfa9f456fa.doc windows office2003
ThisDocument
Module1
Module3
Module123345