Behavioral task
behavioral1
Sample
INV V001295802.xls
Resource
win10-20230621-en
Behavioral task
behavioral2
Sample
INV V001295802.xls
Resource
win7-20230621-en
Behavioral task
behavioral3
Sample
INV V001295802.xls
Resource
win10v2004-20230621-en
General
-
Target
e2fdb921382bde611e5595d4d0481d6a2b35b1975ae07f2ecbf9b2302ff8adc5.zip
-
Size
15KB
-
MD5
0422226b66ee41710746a7bc4f733e08
-
SHA1
5cd5bcb42d7d2061fec143cd4ebe1fb47063d0a0
-
SHA256
c1f90c9e644e1afd24862935952d8e5ca10fd9111212856a87e1c903f4e43076
-
SHA512
ce66a005f6a19f5feabf913ee3c6e98b8e81a532f75a1b3b968342f77e2419aec986fd4d2ebc2d7146b98d0a7284a198052b2cb9c6262184831b1c8031b8e11f
-
SSDEEP
384:b3vCWlzKnh13FvwtZ1+lpLT09RzAopYcvXjx:bfD8h1eT1ipf09VZ
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/INV V001295802.xls office_macro_on_action
Files
-
e2fdb921382bde611e5595d4d0481d6a2b35b1975ae07f2ecbf9b2302ff8adc5.zip.zip
Password: infected
-
INV V001295802.xls.xls windows office2003