Static task
static1
Behavioral task
behavioral1
Sample
f66925570a0a62bd3a90719237058656eadf0c0f891e24799854a7d93e63da1d.doc
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
f66925570a0a62bd3a90719237058656eadf0c0f891e24799854a7d93e63da1d.doc
Resource
win10v2004-20220414-en
General
-
Target
f66925570a0a62bd3a90719237058656eadf0c0f891e24799854a7d93e63da1d
-
Size
265KB
-
MD5
f2a6dfb27d22a0572980c21aa3f0aa72
-
SHA1
793068de3ede317810a04033897061cfb0cd9523
-
SHA256
f66925570a0a62bd3a90719237058656eadf0c0f891e24799854a7d93e63da1d
-
SHA512
671c7cea847396a3ebe8dec53aa1286971857dfa3735a6509015c0b4e606e7f1c6bbade9b0833276790da5244f2cf42be76c1601ced95d1e301e70b6603e0952
-
SSDEEP
6144:wCwQK3RpVS7G4SVuz1QzLhxztsZGPwu41:yQQLGSVuz1QHhxztCu4
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
f66925570a0a62bd3a90719237058656eadf0c0f891e24799854a7d93e63da1d.doc windows office2003
ThisDocument
T0hAE9Cp
wIS4PAO8m
RejH9yKR
f