Behavioral task
behavioral1
Sample
7c6079d7064ec11c061bf34c2b869b9f1d9c257371efe03a76ece54b99d65991.xls
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7c6079d7064ec11c061bf34c2b869b9f1d9c257371efe03a76ece54b99d65991.xls
Resource
win10v2004-20230220-en
General
-
Target
7c6079d7064ec11c061bf34c2b869b9f1d9c257371efe03a76ece54b99d65991
-
Size
1.2MB
-
MD5
cf982d8457dfd8a68070bfde5401bc07
-
SHA1
4853fb9e3999a3238cc6d14bf823df43be7b9c0a
-
SHA256
7c6079d7064ec11c061bf34c2b869b9f1d9c257371efe03a76ece54b99d65991
-
SHA512
977403f4f137ac335a20c45337f9e4531ede4116c75f4a08db6f66f3d05987a8ee621820aeaa070fac2e6a530f1cb425f7c87fd563dcaa65ae10bf4c1679df88
-
SSDEEP
12288:RSAKbpHW9ZFmhBBebEHbCv5PT/pu22d77bMSqkMkuD6nT3ovcUocoFvqmUhmg4uj:7EIneBhHbCvK2Abh4qa5shdE
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
7c6079d7064ec11c061bf34c2b869b9f1d9c257371efe03a76ece54b99d65991.xls windows office2003
ThisWorkbook
Data
Res
cUAMeasure
modUtility
gistThat_
cCell
cDataSet
cDataSets
cDataColumn
cDataRow
cHeadingRow
usefulStuff
cJobject
usefulcJobject
usefulColorStuff
regXLib
cregXLib
cStringChunker
restLibrary
cRest
cBrowser
usefulEncrypt
cOauth2
googleWireExample
oauthExamples
googleSheets
UAMeasure
Module1
Sheet1