Behavioral task
behavioral1
Sample
6f4bc12fce56cce118a4dc54370e85f56c49d3822d642e753e3117a48e394cb7.xls
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6f4bc12fce56cce118a4dc54370e85f56c49d3822d642e753e3117a48e394cb7.xls
Resource
win10v2004-20221111-en
General
-
Target
6f4bc12fce56cce118a4dc54370e85f56c49d3822d642e753e3117a48e394cb7.xls
-
Size
1.8MB
-
MD5
8d2de24d19d8da03725a0af84ab23aac
-
SHA1
70f230b9b0fc7646e3d1bc3c7c5cb00b54b58219
-
SHA256
6f4bc12fce56cce118a4dc54370e85f56c49d3822d642e753e3117a48e394cb7
-
SHA512
7da3809579b69a526b6f6879eb00e76428ba391899273f44693d8b603d699bf9d549327ce06f9a77a4680c64f338a01ec3d1c7b5b2c27a76b83158fb792500ad
-
SSDEEP
6144:MxEtjPOtioVjDGUU1qfDlavx+W2QnAgp778tta:3ots
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
6f4bc12fce56cce118a4dc54370e85f56c49d3822d642e753e3117a48e394cb7.xls.xls windows office2003
ThisWorkbook
Sheet1
Sheet2
Sheet3
UserForm1
decdetails
Sheet4
Sheet5
Sheet6
Sheet7
Sheet8
Sheet9
Sheet10