Behavioral task
behavioral1
Sample
8975304884fa73b88506ddffda56954957351310144282866cdd1f2a201f88eb.xls
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8975304884fa73b88506ddffda56954957351310144282866cdd1f2a201f88eb.xls
Resource
win10v2004-20230915-en
General
-
Target
a68941570bd6dbee2d498e23e150ea08.bin
-
Size
32KB
-
MD5
c2bdb419a8ac806b5979ba12b097a373
-
SHA1
01322a7c87fd2e7b728e2f8ecbe625e56c845038
-
SHA256
e3bad96f4cd0c042d6c812774fe3c0e6fb535e2501f95aa5b3f1c8579156d510
-
SHA512
807297139bfe316dfe25c334e72e2b6e7042dbf82b0ec6280be184b6768fd0ce03dd87d62459f13c929c623f2c2c3ea49410b807aeb810c1bda7a0bc4d94b7e9
-
SSDEEP
768:QttZ+gsTWP00Mu0y2kdLe+oPn0iVLCIejvPt:WlsiP00MXse9c3XTPt
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/8975304884fa73b88506ddffda56954957351310144282866cdd1f2a201f88eb.xls office_macro_on_action
Files
-
a68941570bd6dbee2d498e23e150ea08.bin.zip
Password: infected
-
8975304884fa73b88506ddffda56954957351310144282866cdd1f2a201f88eb.xls.xls windows office2003