Behavioral task
behavioral1
Sample
0d8ebd5567fc7c9fdb87dc36673bb5b4e4f193efacfdd6bfddc36dc5b2422325.xls
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0d8ebd5567fc7c9fdb87dc36673bb5b4e4f193efacfdd6bfddc36dc5b2422325.xls
Resource
win10v2004-20221111-en
General
-
Target
0d8ebd5567fc7c9fdb87dc36673bb5b4e4f193efacfdd6bfddc36dc5b2422325
-
Size
35KB
-
MD5
551bf7d91d5a6ab6b887956d5ce08571
-
SHA1
98d6d6b68e37a3be38e289ad021edfbb417f8c9b
-
SHA256
0d8ebd5567fc7c9fdb87dc36673bb5b4e4f193efacfdd6bfddc36dc5b2422325
-
SHA512
6df7629ef6bb7f9e8e6055f038e2d6f1957529956143037ae5cf88ad86ab40bf00910ac53b23161d0ab14bef9eb8d92094ac16b62f15c75879253517df2f6b57
-
SSDEEP
384:3+LbQWgey6I8Nk7nW8UbXHffJP6RS5l0YQQ:3+LbQwywCnW77fJP6Rwl0x
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
0d8ebd5567fc7c9fdb87dc36673bb5b4e4f193efacfdd6bfddc36dc5b2422325.xls .vbs windows office2003
ЭтаКнига
Лист1
Лист2
Лист3