Behavioral task
behavioral1
Sample
5e0d84b656b3591f834713270f1541123a1ff785f9d55c0663f2e1b1b743afc5.doc
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5e0d84b656b3591f834713270f1541123a1ff785f9d55c0663f2e1b1b743afc5.doc
Resource
win10v2004-20220901-en
General
-
Target
5e0d84b656b3591f834713270f1541123a1ff785f9d55c0663f2e1b1b743afc5
-
Size
20KB
-
MD5
40f7a807533a2cf7ca7d7c4b5de894c7
-
SHA1
6cb2ee347626a229aa05cf3afa378faab9818838
-
SHA256
5e0d84b656b3591f834713270f1541123a1ff785f9d55c0663f2e1b1b743afc5
-
SHA512
4bec8db5474ddba77a0d93ab47567c99dd458b6a817a68953b1e8371d2894cedf647ae1abd36996900dbbf1d0695f0dc04540afc9de9245a9ff69c54d8079fa8
-
SSDEEP
384:rhR0V4Z4UN2JZ0jdntUt40a+ma1x54Z6jCudp:12Vg4O2jGtH0a+ma1x54Quudp
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
5e0d84b656b3591f834713270f1541123a1ff785f9d55c0663f2e1b1b743afc5.doc .vbs windows office2003
ThisDocument
frm
aXdPxs
aCz1d