Static task
static1
Behavioral task
behavioral1
Sample
98917be41e446698aaf1dcb464bfc27ca686c56e2636e2801e6e8c46929e5f71.xls
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
98917be41e446698aaf1dcb464bfc27ca686c56e2636e2801e6e8c46929e5f71.xls
Resource
win10v2004-20220414-en
General
-
Target
98917be41e446698aaf1dcb464bfc27ca686c56e2636e2801e6e8c46929e5f71
-
Size
510KB
-
MD5
4775ebd5e313c8977865c0aa0358f79b
-
SHA1
8bffb3644513b8548f2e107ad8d2707deda65f1d
-
SHA256
98917be41e446698aaf1dcb464bfc27ca686c56e2636e2801e6e8c46929e5f71
-
SHA512
73f7884b31eb0f1c00c6e6e38e968953466d3bf14bb5a8b4691251b1c1da0e0f5e5828574da697769decdb25594a537a77fe2d638ecefe1c5633f787f9a60d5a
-
SSDEEP
12288:O7b8bz1OScm3PYqD1SWwyFUA+/EKrfbOhJ:SScm3ND5s7OhJ
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
98917be41e446698aaf1dcb464bfc27ca686c56e2636e2801e6e8c46929e5f71.xls windows office2003
ThisWorkbook
Sheet1