Static task
static1
Behavioral task
behavioral1
Sample
54f42da8259c446dcaa20a678a382301b319b3936c9d42fe50300d28f6c5939a.doc
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
54f42da8259c446dcaa20a678a382301b319b3936c9d42fe50300d28f6c5939a.doc
Resource
win10v2004-20220414-en
General
-
Target
54f42da8259c446dcaa20a678a382301b319b3936c9d42fe50300d28f6c5939a
-
Size
74KB
-
MD5
3ca459375646fa36b18b24e3d4121ef0
-
SHA1
4a577a89c89d5e641480a8b8c2dccd04ef810b98
-
SHA256
54f42da8259c446dcaa20a678a382301b319b3936c9d42fe50300d28f6c5939a
-
SHA512
ea0037de8f34fa5c8944d8acd02249202519e180473ac2fcfd9d21fe20305f91be72da4d9b466a5ea19264a881078e539aaf8f367eba93fa2d7329979ebcbbe4
-
SSDEEP
768:H7SXcxAL4Gsp8m8WR+AYnVyRQ2zysrmwE4K7B4Ap/uCwTYtr06MMj:HHxM42Pk3ysqr7PZuCnr7j
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
54f42da8259c446dcaa20a678a382301b319b3936c9d42fe50300d28f6c5939a.doc .vbs windows office2003
ThisDocument
NewMacros