Behavioral task
behavioral1
Sample
08b17c6dde33f6c58b61a4e10f42af51fbec8df5e7d5c6846a473d2e8ba455ba.doc
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
08b17c6dde33f6c58b61a4e10f42af51fbec8df5e7d5c6846a473d2e8ba455ba.doc
Resource
win10v2004-20230703-en
General
-
Target
08b17c6dde33f6c58b61a4e10f42af51fbec8df5e7d5c6846a473d2e8ba455ba
-
Size
3.8MB
-
MD5
fee6f3f85f7d7662781d15358ea4bc3e
-
SHA1
4e4683739afaa977347ead6c65498d121107f97a
-
SHA256
08b17c6dde33f6c58b61a4e10f42af51fbec8df5e7d5c6846a473d2e8ba455ba
-
SHA512
1f9411c92817c9b3a173f07a5ae78383da273e453f4fddaedde891e29bb8e2a2eee17a02ce24e8b0c670bf235ea03706a402fa68ef3f6f1387c411c2f0c888eb
-
SSDEEP
98304:hpXk2mCRfCbCFVmcHfoJNCTajmFLvDP/E50Gk:7Xk2mCRfCbCFVdHfQNCTajmFLK0
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
08b17c6dde33f6c58b61a4e10f42af51fbec8df5e7d5c6846a473d2e8ba455ba.doc windows office2003
ThisDocument
AutoModules
BerrickGen
BerrickRegistry
BerrickSendKeys
BerrickWord
c8MC_Abbreviations
c8MC_Analysis
c8MC_DocumentCheck
c8MC_DocumentCreate
c8MC_DocumentFormat
c8MC_DocumentPublish
c8MC_Duplicates
c8MC_FindReplace
c8MC_Formats
c8MC_Highlighting
c8MC_Misc
c8MC_ProcessingParameters
c8MC_Public
c8MC_Sequence
c8_AddinManagement
c8_ApplicationEventHandler
c8_FormFeatures
c8_Misc
c8_Public
c8_Reporting
clsBerrickDateTime
clsClipboard
clsColorManagement
clsDocDescriptor
clsDriveMapper
clsFindReplace
clsFormat
clsGlossary
clsNavigator
clsProgBar
clsRC4
clsSaver
clsSHA256
clsStopWatch
frmAbbreviationsReview
frmAbout
frmAnonymise
frmDuplicates
frmGlossary
frmHighlightSource
frmInputBox
frmInternalsReport
frmIntervalCalculator
frmLicenceEvaluation
frmLicenceLong
frmLicenceShort
frmMessage
frmProgress
frmPublishCustom
clsBWindowsFileDialogs
BerrickEncryption
c8_DocumentCreate
c8_Messages
c8_Licence
c8_Environment
c8_JSONread
c8_JSONwrite
JSON_omegastripes
JsonConverter
c8_Constants
c8MC_DocumentMerge