Behavioral task
behavioral1
Sample
73a0b0b8ecefa3cf572c2194d12609d972a72b7a8a32803317bb0f80bfe0ef92 (1).doc
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
73a0b0b8ecefa3cf572c2194d12609d972a72b7a8a32803317bb0f80bfe0ef92 (1).doc
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
decrypted.xlsb
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
decrypted.xlsb
Resource
win10v2004-20230220-en
General
-
Target
73a0b0b8ecefa3cf572c2194d12609d972a72b7a8a32803317bb0f80bfe0ef92 (1)
-
Size
250KB
-
MD5
fa8e89efe8783469d68a30faa2928c5d
-
SHA1
e79e4920a01ac488f4d3feaade79d44606e22833
-
SHA256
73a0b0b8ecefa3cf572c2194d12609d972a72b7a8a32803317bb0f80bfe0ef92
-
SHA512
726eb6a369ce1b702913e79bfc745abce5a4548eb83a13e3962d8dae4ef22ae3c5a96eea8bfb826c1fa310cec965ffb24c98413e16ecbb7eb8547f2e55ae0b12
-
SSDEEP
3072:HWO6HtvWmstxJ/yAB9CjwGya4FhVAMeT8JGsrE2yurZBQU4YNWbfZu/TJPSQY9QZ:2ZHxWDxJPfFFgghLkN6JP3YLgOG5p44
Malware Config
Signatures
-
resource static1/unpack001/decrypted
Files
-
73a0b0b8ecefa3cf572c2194d12609d972a72b7a8a32803317bb0f80bfe0ef92 (1).doc windows office2003
Password: VelvetSweatshop
-
decrypted.xlsb office2007
ThisWorkbook
mdljpc6cvk
PRG
HOME1
P2
RF
bDemoTour
AXLactv
Sheet4
AXLmenu
Sheet8
HELP1
AXLmod1
Sheet6
BulkPrtM
CellFtM
SlipM
AXLmod2
Module1
Module2
Module3
Module4
mdlixkxyn0