Behavioral task
behavioral1
Sample
d1ac24fe6d7320c30ea4af2b81dfd19521c8554a43a1e84b4252ef5a1fc637d9.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d1ac24fe6d7320c30ea4af2b81dfd19521c8554a43a1e84b4252ef5a1fc637d9.doc
Resource
win10v2004-20240226-en
General
-
Target
d1ac24fe6d7320c30ea4af2b81dfd19521c8554a43a1e84b4252ef5a1fc637d9
-
Size
30.9MB
-
MD5
c6f6f2538ad1eea24d9c0fd820a91f16
-
SHA1
cfb78614644cf7a7c3a88e1f9c11ef3b37ef33dc
-
SHA256
d1ac24fe6d7320c30ea4af2b81dfd19521c8554a43a1e84b4252ef5a1fc637d9
-
SHA512
b1f3967fa8c01c9f41af519663913c793640d021797cca92e6c9e074da59e10f27e5b733160995b6e7fa8c15c8dd1404fade1c9544ce27d7be2deba027e95e92
-
SSDEEP
49152:OtI7KZh1XatFfINl8iNGbKjPqj/xC2I2gZm:OrZh1X8wNlVFPqjY92g8
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
d1ac24fe6d7320c30ea4af2b81dfd19521c8554a43a1e84b4252ef5a1fc637d9.doc windows office2003
ThisWorkbook
Sheet1
FGDfrm
Splash1
MainMenufrm
LogInFrm
Sheet2
PWRfrm
Module1
Module2
Module3
UniversalFunction
Sheet3
Sheet4
Quotefrm
Sheet5
Sheet6
Sheet8
Sheet9
MaterialSendConfirm
Sheet7
Module4
MQPSfrm
AddToOrderMD
Module5
Sheet18
Sheet12
ProductionCalcs
Sheet13
SupplierPopUpForm
MaterialQuoteControls
RecordAmend
Module6
OppAddfrm
NumKeyValidator
Module7
QUOTECHECKER
SETUPSELDEL
Module8