Behavioral task
behavioral1
Sample
e2578f937ece43e40614499cbe202bbd308bca0fcf0bb5316834a1cd9d5ae390.doc
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e2578f937ece43e40614499cbe202bbd308bca0fcf0bb5316834a1cd9d5ae390.doc
Resource
win10v2004-20230220-en
General
-
Target
e2578f937ece43e40614499cbe202bbd308bca0fcf0bb5316834a1cd9d5ae390
-
Size
563KB
-
MD5
9a446553a8cb34951869fa5070ef3cc0
-
SHA1
c3ef8ffba4fb76b98b10fd6811a2ea57726d0f02
-
SHA256
e2578f937ece43e40614499cbe202bbd308bca0fcf0bb5316834a1cd9d5ae390
-
SHA512
fc2094da332d6a562e4950eab6955b3c0aedbfeaa3e19413ccb8a93ee4b0a8fcb4e0b59da269f0c7c3b4f55174ca9d0f07b1ec4c4e394771921dcb4d930949e3
-
SSDEEP
6144:VXwYEwx9xDvRAo3Qpkv5qyN7x2Gm5BZnXiiSB81r1h9r47A:N9bA9y7x2Gm5BZXiiSB81r1h9r4c
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
e2578f937ece43e40614499cbe202bbd308bca0fcf0bb5316834a1cd9d5ae390.doc windows office2003
ThisWorkbook
Sheet1
frmAddTag
clsAppEvents
clsEnumeration
clsFont
clsMoniker
clsReverse
clsUSDConversion
clsUSDFunctions
frmConnect
frmReverse
frmTags
mComparison
mCurves
mMain
mMenu
mUSDDataManage
mUSDFunctions
mUSDLoadCase
mUSDSteadyState
mWinAPI