Behavioral task
behavioral1
Sample
smtp_1.eml
Resource
win11-20231215-en
Behavioral task
behavioral2
Sample
=?UTF-8?B?0J7RgNC00YvQvdC60LAgMl9PSVBfdi4xMC43INC00LXQutCw0LHRgNGMIDIwMjMueGxz?=.xls
Resource
win11-20231215-en
Behavioral task
behavioral3
Sample
email-html-1.txt
Resource
win11-20231222-en
Behavioral task
behavioral4
Sample
Ордынка 2_OIP_v.10.7 декабрь 2023.xls
Resource
win11-20231215-en
General
-
Target
41ac24d7-7bc3-47d3-971a-3473975c6681.zip
-
Size
10.3MB
-
MD5
a9f321182467530b4eef99c277677a50
-
SHA1
937e92d42f06e3616cda293fc734380be8c3a98f
-
SHA256
eb99f24da638ef361b252f6cedee2d009b2bbd1a79cddc1dd0b04763528d7ecf
-
SHA512
c546e446da6eb7142fbb11454e76e77dba553f7e75bd33409a5d2010f66234c9be34b3ab4bb309e7322b57b91be92b07d0c899ee473e1d2bac34f59f411085e9
-
SSDEEP
24576:Zk24B60SEiLE5dHQgGlesPaMsvI3RuIqwAe+nUtwv2hLJek80zrLkBFe6yA64Her:zi1B4suduO1mcuZ4zn
Malware Config
Signatures
-
Office macro that triggers on suspicious action 3 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action static1/unpack002/=?UTF-8?B?0J7RgNC00YvQvdC60LAgMl9PSVBfdi4xMC43INC00LXQutCw0LHRgNGMIDIwMjMueGxz?= office_macro_on_action static1/unpack001/Ордынка 2_OIP_v.10.7 декабрь 2023.xls office_macro_on_action -
resource static1/unpack002/=?UTF-8?B?0J7RgNC00YvQvdC60LAgMl9PSVBfdi4xMC43INC00LXQutCw0LHRgNGMIDIwMjMueGxz?=
Files
-
41ac24d7-7bc3-47d3-971a-3473975c6681.zip.zip
-
smtp_1.eml.eml
-
=?UTF-8?B?0J7RgNC00YvQvdC60LAgMl9PSVBfdi4xMC43INC00LXQutCw0LHRgNGMIDIwMjMueGxz?=.xls windows office2003
Лист17
ЭтаКнига
Лист02
Лист18
Лист05
Лист11
frm_ChoiceOrg
Лист06
Лист03
Лист3
Лист13
Лист01
Лист04
Лист00
Лист14
Лист15
Лист16
Лист08
Module_Check
Module_ConstantsAndVariables
Module_Exclusion
Module_Files
Module_PrepearingData
Module_PrepearingName
Module_ProgressWindow
Module_Sheets
Module_Start
Module_Transform
mdl_00_Parameters
mdl_99_WorkWithFile
mdl_90_AutoOpen
mdl_07_Other
mdl_06_ProtectSheets
mdl_05_SaveError
mdl_04_Rows
mdl_03_Svod
mdl_02_OpenForms
mdl_01_Button
ufm_Sort
Лист4
-
email-html-1.txt
-
Ордынка 2_OIP_v.10.7 декабрь 2023.xls.xls windows office2003
Лист17
ЭтаКнига
Лист02
Лист18
Лист05
Лист11
frm_ChoiceOrg
Лист06
Лист03
Лист3
Лист13
Лист01
Лист04
Лист00
Лист14
Лист15
Лист16
Лист08
Module_Check
Module_ConstantsAndVariables
Module_Exclusion
Module_Files
Module_PrepearingData
Module_PrepearingName
Module_ProgressWindow
Module_Sheets
Module_Start
Module_Transform
mdl_00_Parameters
mdl_99_WorkWithFile
mdl_90_AutoOpen
mdl_07_Other
mdl_06_ProtectSheets
mdl_05_SaveError
mdl_04_Rows
mdl_03_Svod
mdl_02_OpenForms
mdl_01_Button
ufm_Sort
Лист4