Behavioral task
behavioral1
Sample
f50ca59a7e263a9b8f6b3432d380aebca85dfe041872812c81aafa26bf3b3973.xls
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f50ca59a7e263a9b8f6b3432d380aebca85dfe041872812c81aafa26bf3b3973.xls
Resource
win10v2004-20221111-en
General
-
Target
f50ca59a7e263a9b8f6b3432d380aebca85dfe041872812c81aafa26bf3b3973
-
Size
84KB
-
MD5
650b3906f6f93a46fb68cfbbe46ef1ce
-
SHA1
f4030585d3cf0b4bcb98df41390f1ebf19af0d8e
-
SHA256
f50ca59a7e263a9b8f6b3432d380aebca85dfe041872812c81aafa26bf3b3973
-
SHA512
d5b0c3c2cf182c46322e87f241a5e27197d4d5ccb8ac67a8875eaea124f95fee043c80364594918695f0407f1e5db1ac81ccdfea3f7829c8c2c32073e5bc4c59
-
SSDEEP
768:U+LboftBbDFZ8LMjUK0v3i8ueVwovzX9hZLz4/9gE5lPLjydHZ0X4k:2JZ8LMjUvSWJX9hlz4GETP/ydHSX
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
f50ca59a7e263a9b8f6b3432d380aebca85dfe041872812c81aafa26bf3b3973.xls windows office2003
ЭтаКнига
Лист1
Лист2
Лист3