Behavioral task
behavioral1
Sample
64285763b4c4aabd830e76b400cf99ce6a696e11f6dbf1514f93157539022188.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
64285763b4c4aabd830e76b400cf99ce6a696e11f6dbf1514f93157539022188.doc
Resource
win10v2004-20240226-en
General
-
Target
64285763b4c4aabd830e76b400cf99ce6a696e11f6dbf1514f93157539022188
-
Size
639KB
-
MD5
7a39eed6aa116cbefb4e5dfaf40136fb
-
SHA1
1a811d7ab00d1185eabd580bf82c1f576e1c41fe
-
SHA256
64285763b4c4aabd830e76b400cf99ce6a696e11f6dbf1514f93157539022188
-
SHA512
5900615377032ffa2d7d5bf7b38949eac178a557f8647140141352b46f667845efe18835d09884d76206e42b3bf084852d5ae3ba8ba3e6d790ed5e568777b7ec
-
SSDEEP
12288:EgcTEIkT9BDeb0omzgcU0dqYSrUIrklvPU6Il5KfKo2fa54OgJFoiDYr:I49Zomzgc7dJSrUIrYvcv5KSo2S54OgC
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
64285763b4c4aabd830e76b400cf99ce6a696e11f6dbf1514f93157539022188.doc windows office2003
ThisWorkbook
data
overeni_dat
functions
frmForm
helper
SAP_helper
data_zaloha
frmKalendar
editor
frmUvod
frmSplash
filtr_datum
SAP_helper2
wsPRINT
START
NABORCICI
clsVyplata
frmNaborcik
frmVyplata
temp
frmPass
login_check
role
frmNab_detail
filtr_datum_2
Module1
DtPickerInterface
Calendar_1
uFormDtPicker
SAP_helper_2024
shtDatabaze
WS_ASEP
Module2