Static task
static1
Behavioral task
behavioral1
Sample
PO IONE-GS-ME-0079 Signed.xlsx
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
PO IONE-GS-ME-0079 Signed.xlsx
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
decrypted.xlsx
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
decrypted.xlsx
Resource
win10v2004-20220812-en
General
-
Target
PO IONE-GS-ME-0079 Signed.xlsx
-
Size
173KB
-
MD5
0c05161cd502f7d6fac71acec26d0cda
-
SHA1
21fb4e338bde9a96adad1158690172d095bc7fc1
-
SHA256
adfc9fdd3b19c10aa1c533d1d135181e974755d82d6b6f8bf33cdd9e76177701
-
SHA512
39599d90e8cb37f57e0ac40cb23885baa84cba17f8948ef63678fa2759b1209f8c8f36f3621c799a5e98e63f3f0ea4b90170a717f128567a71f9a2567a9e5bbf
-
SSDEEP
3072:VCSrDCLf/JojoVGm41CeBWCOfgeKjJSICNnAZtXUBu8k96NnZMI1j:kSgfhosanBrggtjUhSZtXUB7NnZMk
Malware Config
Signatures
Files
-
PO IONE-GS-ME-0079 Signed.xlsx.doc .xlsx windows office2003
Password: VelvetSweatshop
-
decrypted.xlsx office2007