Behavioral task
behavioral1
Sample
3d1acc20c90088cf164863343dd3bca558a45bb0e386923e26b88ed571e991e8.xls
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3d1acc20c90088cf164863343dd3bca558a45bb0e386923e26b88ed571e991e8.xls
Resource
win10v2004-20220812-en
General
-
Target
3d1acc20c90088cf164863343dd3bca558a45bb0e386923e26b88ed571e991e8
-
Size
45KB
-
MD5
22e40fcd4d1901b94ff4972cd472d185
-
SHA1
cdfd492334f6ccb4d48fa65d969b132572766216
-
SHA256
3d1acc20c90088cf164863343dd3bca558a45bb0e386923e26b88ed571e991e8
-
SHA512
b27919023d9de1d642a1324af72afff1172812e2adcacaa9af41fae963d94c75c3b473f78c9c2c1488b98ea7229959c9b0a18a68a836f66dd88e32c0d2b9179c
-
SSDEEP
384:6+LbA3tCtWHx6y+BMCJ3vuFHKEMgtcvLcTlpjjCTse4fDxLHU+k:6+LbA3taWHx6xj2FHXMgtcvgLjkAtL
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
3d1acc20c90088cf164863343dd3bca558a45bb0e386923e26b88ed571e991e8.xls windows office2003
ЭтаКнига
Лист1
Лист2
Лист3