Behavioral task
behavioral1
Sample
25c8065f47e73d13028eb7fa28d77eeb55bf820cfaf3ffc77e5d63d4c6e22dcb.doc
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
25c8065f47e73d13028eb7fa28d77eeb55bf820cfaf3ffc77e5d63d4c6e22dcb.doc
Resource
win10v2004-20221111-en
General
-
Target
25c8065f47e73d13028eb7fa28d77eeb55bf820cfaf3ffc77e5d63d4c6e22dcb
-
Size
29KB
-
MD5
cc091b063e83ba7758e9a77a3f4f5a8e
-
SHA1
a17af00c72318541419f1c6240142ee56062e984
-
SHA256
25c8065f47e73d13028eb7fa28d77eeb55bf820cfaf3ffc77e5d63d4c6e22dcb
-
SHA512
cb57aff5535f2829da24894b8a505ae5c22178a73ecc8be7a3a44d8701eaffefefb60867662e7ea7a215c5561765f42d7e4b1e3146621d9f4f33e547656f448e
-
SSDEEP
768:hRlqQ5L1l3nc9EVgGNiodZxda+ma1xzwSwuzp:hDOINNba+ma19wSwuz
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
25c8065f47e73d13028eb7fa28d77eeb55bf820cfaf3ffc77e5d63d4c6e22dcb.doc .vbs windows office2003
ThisDocument
frm
aSQAt
a3GhN