Behavioral task
behavioral1
Sample
7db49013954e8864a5ad8bb6189ee7ab3917efff426b4e07670a335c68280bdb.doc
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7db49013954e8864a5ad8bb6189ee7ab3917efff426b4e07670a335c68280bdb.doc
Resource
win10v2004-20221111-en
General
-
Target
7db49013954e8864a5ad8bb6189ee7ab3917efff426b4e07670a335c68280bdb
-
Size
41KB
-
MD5
b2356ce5a8f311df482d5b2a92e567ff
-
SHA1
7417f3b9d28457998f0a0a3af2d1a92060cb4c92
-
SHA256
7db49013954e8864a5ad8bb6189ee7ab3917efff426b4e07670a335c68280bdb
-
SHA512
9692b2a76bc31bb068c82fc2d4b0acab0a312561183938113edf14e8ae27808a07852f11492b4d7c070d3dc31fc830dd284968a1a6506636f610f38ee942cb52
-
SSDEEP
384:NfPRkwBLmYpF59eVqiqaMmBy0BRTHYCZ0jvCNTj9Dy0NtuZv:Zp9LmYpcUIHByuRTv8CNFtWB
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
7db49013954e8864a5ad8bb6189ee7ab3917efff426b4e07670a335c68280bdb.doc .vbs windows office2003
ThisDocument