Behavioral task
behavioral1
Sample
849c085c8f78da222e15fa2b7a6fd08071b7d1863da4ed339b797e614b15a393.doc
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
849c085c8f78da222e15fa2b7a6fd08071b7d1863da4ed339b797e614b15a393.doc
Resource
win10v2004-20221111-en
General
-
Target
849c085c8f78da222e15fa2b7a6fd08071b7d1863da4ed339b797e614b15a393
-
Size
16KB
-
MD5
89d90f25dde79f6ef5d8417ceff148ef
-
SHA1
3e399ea263d544bcc7a5fd6e9a4f7281fbf93546
-
SHA256
849c085c8f78da222e15fa2b7a6fd08071b7d1863da4ed339b797e614b15a393
-
SHA512
5e98c61ae84aa524804f49bab8f1bdeaf2c8cc85c1fe31834a9b225574a976e4665a2033ee4df6bc600c4e911e912cf110750f4f17700e315c95f3c38f0b9ada
-
SSDEEP
192:Kf8/9kC6gmORA5S+2Q8F8YukPCeqd+9Y5QG8YavvamST:CU96pCOpkPKb8Ya
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
849c085c8f78da222e15fa2b7a6fd08071b7d1863da4ed339b797e614b15a393.doc windows office2003
ThisWorkbook
Sheet1