Static task
static1
Behavioral task
behavioral1
Sample
6df11e5cbc78b1ac4c9db027e1b364f950312e0a6248e67a0ba25343c073468c.xls
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
6df11e5cbc78b1ac4c9db027e1b364f950312e0a6248e67a0ba25343c073468c.xls
Resource
win10v2004-20220414-en
General
-
Target
6df11e5cbc78b1ac4c9db027e1b364f950312e0a6248e67a0ba25343c073468c
-
Size
681KB
-
MD5
6bea544dc5be6b7181c751cc3a6a9f75
-
SHA1
5f7872bc1d1cdb55fdce5027d12e501a634ac169
-
SHA256
6df11e5cbc78b1ac4c9db027e1b364f950312e0a6248e67a0ba25343c073468c
-
SHA512
c5eb7aded6e8cbb92f8bc969ced6c67a3340af3f97beb7006c0ab59a808cbd2efa5a9ac4bf7c5ef159aabf9da6031bdb8cf379fb33c239e1441ce063a02da3ce
-
SSDEEP
12288:ze+b6TaG63jLiyAmuTOdqcWY58hqgxOtiHXmOL:zeqFH/ACchL
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
6df11e5cbc78b1ac4c9db027e1b364f950312e0a6248e67a0ba25343c073468c.xls windows office2003
Sem
Page1
Module1
UserForm1
Module2
Class1
UserForm6
Page11
Module6
Module5
Module4