Behavioral task
behavioral1
Sample
698540af0fd9e35fa63bdee0e9f5565cf8d81edd880015afd2d737040a018bb5.xls
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
698540af0fd9e35fa63bdee0e9f5565cf8d81edd880015afd2d737040a018bb5.xls
Resource
win10v2004-20230621-en
General
-
Target
a50a5fe1deb0f2ec7459d1caebe94776.bin
-
Size
114KB
-
MD5
00640aed5639d2fad94b5b10861dc758
-
SHA1
48662ae8f1edb6cd0b9bc04909f01ce84f488afe
-
SHA256
16486cbb76b6dec16ef1cb29642f2687d6af1a1346612a2137dbaa4df07758b5
-
SHA512
879f423d232e60fbe0e3d16166331598f2abead3cd3a1ed4e5a0828d3c8db63f7a6bd5e76deea32bc67edbc73e1b416af63b1a23be48833a2a4422c6e2acad53
-
SSDEEP
3072:Hgw8GRXXQM0tzOFTyy/d5QEIhQQkWudyjQ6JW+u88L0j0mvdxg4cdp1x:Hl8sVTn50/k11JL0Y2dup
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/698540af0fd9e35fa63bdee0e9f5565cf8d81edd880015afd2d737040a018bb5.xlsx office_macro_on_action
Files
-
a50a5fe1deb0f2ec7459d1caebe94776.bin.zip
Password: infected
-
698540af0fd9e35fa63bdee0e9f5565cf8d81edd880015afd2d737040a018bb5.xlsx.xls .xlsx windows office2003