Static task
static1
Behavioral task
behavioral1
Sample
6d641a102305c0a62467fdf0197ff548473edf090d07c0c3faa3f1f9ea10c760.xls
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6d641a102305c0a62467fdf0197ff548473edf090d07c0c3faa3f1f9ea10c760.xls
Resource
win10v2004-20230703-en
General
-
Target
6d641a102305c0a62467fdf0197ff548473edf090d07c0c3faa3f1f9ea10c760.zip
-
Size
1.5MB
-
MD5
7e03f9d9b69f756b690ffc4a00efc95b
-
SHA1
d55abea3e1c49537fdeefc182ce95ef404b2cbb6
-
SHA256
ce00ef04f8880ede4e8b243f6e12c044a7b24cd915be5d3ef2f07eef8ae681e5
-
SHA512
9bb27d8c92f368e0a8e2176ad545ab41957e95267d1e92fc98eae3fa986dd6ea53fda4613c77cbdcc3d3b7594095e84e17e850dd91add01c4cc7926d30e4b55d
-
SSDEEP
24576:VIjbkwAL6PIwkTEXApb+UVnXwOi2xwDXeQuAcckCvwUhoQIrWTk69bNHAzbo:yjfAZwkTEwpptgZZFkCvwQoQlT/bNgA
Malware Config
Signatures
-
Office document contains embedded OLE objects 1 IoCs
Detected embedded OLE objects in Office documents.
resource yara_rule static1/unpack001/6d641a102305c0a62467fdf0197ff548473edf090d07c0c3faa3f1f9ea10c760.xls office_ole_embedded
Files
-
6d641a102305c0a62467fdf0197ff548473edf090d07c0c3faa3f1f9ea10c760.zip.zip
Password: infected
-
6d641a102305c0a62467fdf0197ff548473edf090d07c0c3faa3f1f9ea10c760.xls.xls .pdf windows office2003