Behavioral task
behavioral1
Sample
5dca7f9161d19585ac8954a06a6ef3df81ef304f4a36b322b64fbb806e8d3bb5.xls
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5dca7f9161d19585ac8954a06a6ef3df81ef304f4a36b322b64fbb806e8d3bb5.xls
Resource
win10v2004-20230915-en
General
-
Target
5dca7f9161d19585ac8954a06a6ef3df81ef304f4a36b322b64fbb806e8d3bb5.zip
-
Size
318KB
-
MD5
d94efca34e9052c4d859abe48aaa9811
-
SHA1
96efce41004288240e512aa46165523d283d8b8b
-
SHA256
9b134b8b578a09bc08f5b080a80be45c8bb0af38be72025fc92f30a91c0fccdc
-
SHA512
73f4601080e20452fef5fad1c3914f3109f7707f8ae6c6b7e1052e8e675db44ae2c7cb3946798dfc69cc8715d188d498f5d1bff77f4dfb2be88d6629a1d4801a
-
SSDEEP
6144:3HSL9QPW/ZXHHbzCuLkwgqhKNGphJfLlUj6S4RWI9P7RJQq:CL9QO/ZXXXp1KNGDJfEv4RWIJ7bD
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/5dca7f9161d19585ac8954a06a6ef3df81ef304f4a36b322b64fbb806e8d3bb5.xls office_macro_on_action -
resource static1/unpack001/5dca7f9161d19585ac8954a06a6ef3df81ef304f4a36b322b64fbb806e8d3bb5.xls
Files
-
5dca7f9161d19585ac8954a06a6ef3df81ef304f4a36b322b64fbb806e8d3bb5.zip.zip
Password: infected
-
5dca7f9161d19585ac8954a06a6ef3df81ef304f4a36b322b64fbb806e8d3bb5.xls.xls windows office2003
ThisWorkbook
Sheet1
Sheet2
Sheet3
Module1
Module2
Module3
Module4
Module5
Module6
Module7
Module8
Module9
Module10
Module11
Module12
Module13
Module14
Module15
Module16