Behavioral task
behavioral1
Sample
0f35d4d74147e7f497d6c6ed1ce038f6b6ffcd1c125eec9052abb50764d4c567.doc
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0f35d4d74147e7f497d6c6ed1ce038f6b6ffcd1c125eec9052abb50764d4c567.doc
Resource
win10v2004-20221111-en
General
-
Target
0f35d4d74147e7f497d6c6ed1ce038f6b6ffcd1c125eec9052abb50764d4c567
-
Size
72KB
-
MD5
fcd77651977ecbfc3c87a0d98ff76c9e
-
SHA1
acc912b36db523464fa9ecd7f5fa369dba441533
-
SHA256
0f35d4d74147e7f497d6c6ed1ce038f6b6ffcd1c125eec9052abb50764d4c567
-
SHA512
df1451f2922131b1a51956a6ed48b72c81cf9f10b38db7aad7bec9a81fc7b69972e00565116c7bdedb32903436905242e656c38dd52158a305c7bf4209c7138b
-
SSDEEP
1536:qjD3EOz7x0B4pNUbraaPYbJqo4k4FRWzpOLwcdDX3qgR6yxpe:du/MaaQTgR6yxp
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
0f35d4d74147e7f497d6c6ed1ce038f6b6ffcd1c125eec9052abb50764d4c567.doc windows office2003
Avira
Módulo1
Módulo2