Behavioral task
behavioral1
Sample
mrkvk.ru_download.php_id=202.xls
Resource
win7-20230220-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
mrkvk.ru_download.php_id=202.xls
Resource
win10v2004-20230220-en
5 signatures
150 seconds
General
-
Target
mrkvk.ru_download.php_id=202.xls
-
Size
969KB
-
MD5
6621f5775827f4ace571efc47dce41f3
-
SHA1
62fdd4d623e3457be34bfe6b85d4e948dfaf1e18
-
SHA256
5bf929b79779161deaca45f13e9d9b87345dc50700af8e2db032a96057161af5
-
SHA512
c5586f5a6d417ee4097e6480463572128c1293f606dc4a5769b91501522ae15cc0651df29fe47a3a513e7b8fe0003340bb4d91998a90b735cad8d00c5e871637
-
SSDEEP
6144:ZSRAq9NErktK63Jc+eJZLNtFeEoEPMxfXO4G9T80vdvUYBXl6ATj8SvCw:M1NvALD1oEkxPsNPvr1HRvCw
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
mrkvk.ru_download.php_id=202.xls.xls windows office2003
ЭтаКнига
TSH_ET_UNION
modCommandButton
modClassifierValidate
sheet_Check
sheet_Instruction
modCheck
frmReestr
modDblClick
ProcHelpWork
modGlobals
TSH_TEHSHEET
sheet_Title
modInfo
modInvokeHTTPServer
modDefines
Wrapper
modTitleSheetHeaders
modfrmReestr
TSH_REESTR_ORG
modServiceModule
modScrolling
modfrmDateChoose
AllSheetsInThisWorkbook
NamedRangeAppender
sheet_Section3
TSH_REESTR_MO
TSH_REESTR_FILTERED
modWindowClipboard
frmDateChoose
sheet_Comment
sheet_RegionSelect
modHTTPGlobals
modHTTPServerCaller
modReestr
modHyp
modChange