Behavioral task
behavioral1
Sample
c09e5da9a5daaab06fff26977588a9552f5047f8ac80aedb79a6f8ef211f0af1.xls
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c09e5da9a5daaab06fff26977588a9552f5047f8ac80aedb79a6f8ef211f0af1.xls
Resource
win10v2004-20230220-en
General
-
Target
c09e5da9a5daaab06fff26977588a9552f5047f8ac80aedb79a6f8ef211f0af1
-
Size
1.0MB
-
MD5
4b812491f91efb8cd505a5ada25be4ce
-
SHA1
38d82b8c9cf179ea663d1bdff10fde4cc5b10990
-
SHA256
c09e5da9a5daaab06fff26977588a9552f5047f8ac80aedb79a6f8ef211f0af1
-
SHA512
0b18442fb21208dc6247e64d599886253c385d84d3783bcd68a3f61cca2c3f324b7ebd1b3d8cf2c6fb91bdfc9e642be383348cbf2c0437c4ffefd0e089304b57
-
SSDEEP
24576:kMN3VaZP2xa/y1gZph9wOFV2/D0bi95gB0ptHXQjSXbPlUYkozpbJewIboTRvu15:BiZPl
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
c09e5da9a5daaab06fff26977588a9552f5047f8ac80aedb79a6f8ef211f0af1.xls windows office2003
ThisWB
mod_About_NEW
mod_Main
mod_Functions
FWF
shtr
AddinSettings
F_Progress
ProgressIndicator
F_FirstRun
mod_CommonFunctions
F_About
mod_Lookup
mod_CheckFunctions
SpecialControl
F_Settings
Fchar
mod_Translate